Policies have been adopted for many reasons within web services and Service-oriented Architecture in general. However, while they are a favoured method of management, this only occurs at the service level and in the software domain. Policies already exist in a narrow variety more focussed on service properties such as authorisation. Business metrics are often overlooked when selecting a service to satisfy a need and these are often different to metrics used by the standard software engineer. As a significant number of web services become available, more emphasis needs to be placed on management of services in the business domain. The web service protocol stack provides only a hint of business management techniques on top of any orchestration or composition mechanisms. In this paper, we propose a policy framework that can be used to express business requirements for web services, at a business level that is more abstract than the current high-level composition and orchestration technologies.