Setting up policies seems easy, it’s just putting down the management objective in written form.
However, the objective must be practically achievable and enforceable for all stakeholders involved. Otherwise, it’s just a slogan in the air as well as a low-hanging fruit of non-compliance in any assessment exercise.