ing environment, comprising: (1) a policy manager, coupled to a network, including a database for storing a first version of a policy including a plurality rules; updating means for entering a sequence of incremental changes to the rules in the first version of the policy to generate a second version of a policy; tracking means for recording a respective delta change for each of the incremental ch