Business rules are formal representations of business policies and constraints. Option C is correct - business rules model business policies by encoding organizational logic separately from application code. Option A is incorrect because business rule modification is typically done by business analysts, not just technical experts. Option B describes input validation, which is different from business rules. Option D is incorrect because business rules frequently change with market conditions.