Abstract: A system, method, and computer program product enforce a universal security policy across several systems. In one embodiment, the system comprises a translation module that translates the universal security policy into local security rules enforceable by the security components of the several systems. The system also comprises a policy pushing module that transmits the translated local security rules to each of the several systems. Further, the system can include an analysis module for detecting local security rules in the several systems that are inconsistent with the universal security policy.

Abstract: A system, method, and computer program product for monitoring and aggregating user activities across heterogeneous systems. The system, method, and computer program product retrieve information about the heterogeneous systems and rules, monitor user activities in the heterogeneous systems according to the rules, reconcile the user activities by providing supplemental information, aggregate the monitored activities, and report the aggregated user activities to authorized users.