Policies specify the settings, the authorizations, or the permissions that network resources must have to comply with your company policy. SymantecESMcompares the current state of each assessed computer to standards that are defined in the policy, and reports each discrepancy with its severity score.