Who can setup Policies?

Users with Creator or System Administrator privileges can initiate policy creation in Compliance Track.