I Need an Automated Policy Management System: Should I Build or Buy?