Abstract: The disclosure is directed to an autonomous method for dynamically providing a security policy. A method in accordance with an embodiment includes: determining an existence of a new Internet-based security threat; proposing a security threat update to an existing security policy in response to the existence of the new Internet-based security threat; determining a change in a set of business rules; proposing a business rules update to the existing security policy in response to the change in the set of business rules; combining the security threat update and the business rules update into a consolidated security policy update; and updating the existing security policy based on the consolidated security update.