In my organization, some of hte top challenges for improving the Policy Management KPA are:
– staffing constraints and resource expertise in policy management
– standardizing the policy rule language to align with other technology policies
– making enforcement effective, including gaining buy in from stakeholders
– implementing policy rules for areas that are not well controlled