Framework for IS policies