Separating policy from data enables more robust and reusable policy definitions that allow you to factor external data sources in compliance evaluation.

Read More at Enable Sysadmin