A system for distributing a security policy in a distributed computing environment, comprising: (1) a policy manager, coupled to a network, including a database for storing a first version of a policy including a plurality of rules; updating means for entering a sequence of incremental changes to the rules in the first version of policy to generate a second version of a policy; t