As the number of APIs keeps on increasing, it is essential to establish policies and to put other mechanisms in place for effective monitoring and management. The policies can broadly be categorized as design-time and runtime governance. The policies are highly influenced by business objectives and goals. Increasingly, IT is being upgraded to meet changes in business sentiments. Thus, IT policies have to be synced with business expectations to produce solid and smart governance.