1. A method for gathering information in a network auditing system utilizing a plurality of heterogeneous information sources, the method comprising: communicating with the plurality of heterogeneous information sources via a uniform communications interface; receiving network information gathered by the heterogeneous information sources via the uniform communications interface; converting the received network information into a normalized data format; storing the converted network information in a data store; comparing at least a portion of the converted network information with a network policy; and determining, based on the comparison, compliance with the network policy.