1. A method of managing information comprising: providing a plurality of policies stored at a server, wherein a first policy comprises a first conditional statement comprising a first variable defined by a first abstraction and a first corresponding action that will be performed when the first conditional statement is satisfied, and the first abstraction comprises a definition statement stored separately from the first policy; transferring and storing at least one of the plurality of policies at a first target; preventing transferring and storing of any one or more of the plurality of policies to a second target; for the first target, controlling access to information based on the at least one of the plurality of policies transferred and stored at the first target; for the second target, controlling access to information based on the plurality policies stored at the server.