I think that the three levels of ethical decisions are 1) laws, 2) policies, and 3) individuals.
Laws refer to the laws of the land. It defines the difference between right and wrong. It also defines what is considered acceptable behavior by the majority of people.
Policies refer to the business organization's internal policies and procedures. Each organization has a set of clearly stated, highly ethical policies that serves as guidelines on how its people will conduct their business.
Individuals refer to the persons innate moral code. Ethics must be present in all levels before an individual can commit to a business decision.