Exam ITIL4-DPI Topic 4 Question 13 Discussion

In ITIL 4 DPI,policiesare the high-level expectations, rules, or guidelines that are defined by the organization' sgoverning body. They establish the framework for decision-making and behaviour.Controls, on the other hand, are management mechanisms used to enforce policies and ensure compliance. Thus, policies come from governance, while controls are implemented bymanagementto enforce those policies.
(Reference: ITIL 4 Strategist DPI, section on "Policies, controls, and guidelines - governance vs.
management responsibilities")