1. A method of operating an information management system comprising: providing a server having access to a policy database storing a first set of policies; providing a device, separate from the server, comprising a decision engine, implemented using executable code, to manage information accessible via the device according to the first set of policies stored on the device; providing a first abstraction, referenced by at least one policy of the first set of policies; storing the first abstraction at the device, wherein the first abstraction includes a definition statement used by the device when evaluating the at least one policy of the first set of policies; in the policy database, storing a second set of policies; connecting of the device to a network with the server having access to the policy database; via the server, sending the device the second set of policies to replace the first set of policies stored at the device; after receiving the second set of policies at the device, replacing the first set of policies stored at the device with the received second set of policies; and using the decision engine to manage information accessible via the device according to the second set of policies, whether the device is connected or disconnected from the network, comprising: allowing access to a first document by a first policy of the second set of policies, wherein the first policy references the first abstraction stored at the device; and when access to the first document is granted according to the first policy, determining whether an action operation is allowable according to a second policy of the second set of policies.