Policies were mandatory, high-level requirements that, with rare exception, had to be followed.
Policies had to been followed and were high-level requirements.