A device is disclosed that includes software components for executing actions and for controlling the device in order to conform to specified policies. The device includes a controller to deny or permit execution of actions. The controller monitors and interrupts execution of device's actions in order to determine whether an action violates a policy, policy rules, or if the action is prohibited by a policy. The controller also manages policies defined for the device. Each policy is translated into a language understandable by the controller and stored on the device. Each policy can be updated or changed dynamically. Additionally, each policy can securely be updated or changed remotely.