We are currently developing an Open Source (OS) Policy for our company. To guide us through this process, we are following several Gartner publications. However, we are also looking for real-world implementation cases. Do you know of any examples of OS Policy implementation that you could share with us?

In relation to our business, there is a list of eligible OS license models existing, where any OS is assessed against. This is to prevent compliance issues.
Aside, an assessment of the status of the software like active in development (by a significant number of community developers) and last updated gives a hint on the business risk of certain products or libraries, being outdated or not maintained any more (including cybersecurity risks!).
This holds in particular for data science libs.

It largely depends on how you plan to use open source. I am a big fan of using open source solutions, but in an enterprise setting, it's important to consider the full context. Often, compliance and legal issues come into play, so I would definitely consult that part of the organization.