Information systems manage different types of data, commonly classified between public and secret data. The origin of some programs are not known by the final user, having the risk of executing a program and leaking some of the secret data. Information flow control serves to track how are the variables accessed and used in order to know if a program may leak a secret. Information flow policies define how information can flow, allowing no flow from secret to public variables in the case of the noninterference property or accepting certain flows in the case of information declassification. However, countermeasures are not considered at the level of defining a policy. This work intends to give a framework to accept countermeasures during the definition of a policy, improving its expressiveness. The proposals are formally defined in order to allow a future systematization of the security analysis.