1. A system implementing a security authorization paradigm comprising an access control scheme and an auditing scheme; wherein the access control scheme includes a semantic framework comprising assertions and authorization queries; and wherein the auditing scheme includes an audit policy that is coupled to the semantic framework of the access control scheme such that the audit policy is specified using at least a portion of the semantic framework.