check SYSDATE or SYSTIMESTAMP.
for business hours, I think SYSDATE would be sufficient
your policy function might be something like... if sysdate between 8am and 5pm then ok
which, in pl/sql might be a predicate something like....
return (SYSDATE >= trunc(sysdate) + 8/24 and SYSDATE <= trunc(sysdate)+ 17/24)