1. A method of defining a security arrangement between entities of a distributed computing system, the method including: identifying a portion of a first security policy written in a first security policy language; identifying a portion of a second security policy written in a second security policy language; and processesing data in accordance with the portion of the first security policy and the portion of the second security policy.