The Board of Directors implement the policy by adoption. The CEO then oversee that the implementation is done within the organization. This is done through an instruction that the PM's undertake.
The independent functions of compliance & risk follow up upon the policies and instructions that the company has. In Aktie-Ansvar´s case all policies and instructions are gathered within the internal rulebook.
Internal and external audit follow up on policies and how they are implemented in the organization.