Described is a method, a system, a computer program product and a service implemented at least partially through a data communications network to dynamically change the effect of an enforcement of a policy in a policy-managed system. The method, system, computer program product and service enabling the user to identify at least one policy as a dynamic policy and to specify at least one part of a policy statement of the dynamic policy to have a value that can be varied while the policy is active.