1. A computer-implemented method of detecting violations of policies of an organization, comprising: under the control of one or more computer systems configured with executable instructions, receiving external information from one or more external information sources; receiving internal information from one or more internal information sources; storing the external information and internal information in one or more data stores that collectively implement one or more ontologies; applying one or more conditions to the external information and internal information in the one or more data stores to determine a conclusion; and providing the conclusion.