Open any mature company's policy manual and you can read its scar tissue. The expense rule from the 2019 conference incident. The remote-work clause from that one abused arrangement. The seventeen-step approval born of a single bad contract. Each policy is a monument to a moment someone wasn't trusted — usually with good reason, once.
The trouble is what accumulates. Rules written for the worst 2% are experienced by the other 98% as a verdict on them. And people live down to verdicts: treat professionals like suspects and they stop bringing judgment to work, because judgment has been declared above their pay grade.
You cannot write enough rules to replace judgment. You can write enough to discourage it.
What Policies Are Actually For
Policies earn their existence in three situations: where the law requires consistency (safety, harassment, leave); where stakes are high and reversibility is low (data handling, financial controls); and where consistency itself is the fairness (how pay decisions work, how grievances are heard). In these zones, a clear rule protects employees from arbitrary treatment. Write these well, enforce them evenly, and they build trust rather than spending it.
Everything else — dress, hours, expense minutiae, how many days in the office, the tone of email signatures — lives in judgment territory, where every rule you add transfers a decision from a capable adult to a document that has never met the situation.
The Alternative: Principles With Owners
Where you're tempted to write a rule, try a principle plus accountability instead. Not a 14-page travel policy but "spend the company's money like it's your own, and be ready to explain any expense to your team." Not approval matrices but named owners with clear authority and visible outcomes. Principles scale to situations no policy author imagined; rules break exactly there.
The honest objection: "someone will abuse it." Yes — someone will. Handle the someone. Managing the 2% directly is uncomfortable, which is precisely why organizations prefer writing rules for the 98%: a policy is a way of having a hard conversation with everyone except the person who needed it.
Auditing the Manual
- For each policy, name the harm it prevents. If the answer is an anecdote from years ago, it's scar tissue, not protection.
- Check the cost of the rule against the cost of the risk. A three-signature approval that delays every contract to prevent a rare $5k mistake is paying dollars to insure pennies.
- Sunset by default. New policies get an expiry date and must re-justify themselves. Monuments shouldn't be permanent just because removal requires a meeting.
- Watch what the rule teaches. Every policy is also a message about who you assume your people are. Make sure it's a message you'd say to their faces.
Culture is what people do when the policy doesn't cover it — which is most of the time. Invest accordingly.