1. A tangible computer-readable medium comprising computer-executable instructions that when executed by a processor cause a system to perform: receiving an indication relating to a plurality of controls being monitored in relation to activity events of a plurality of user accounts; organizing at least a portion of the plurality of user accounts into a group based upon information relating to the user accounts; receiving identification information associated with a responsible account that is responsible for a plurality of user accounts; receiving instructions from a responsible account associated with the monitoring of thresholds for at least a portion of the controls being monitored; and applying the instructions to at least one group of user accounts to create a dynamic security policy.