Integrating policy risk into enterprise risk management

How do you integrate policy-related risks into your overall enterprise risk management framework? Looking for practical approaches to connecting policy governance with ERM.