Implementing policies in a Policy-as-Code framework presents a new type of complexity, one that many organizations are not well-prepared to address.