1. A method comprising: communicating with a plurality of heterogeneous information sources; converting received network information into a normalized data format written in a mark-up language; comparing at least a portion of the converted network information with a network policy; determining, based on the comparison, compliance with the network policy; and recommending rules for improving the network policy; wherein the received network information is normalized for structure utilizing a conversion table that maps known fields of the received network information into fields used in the normalized data format; wherein the rules are recommended via an ordered list, the ordered list ordering the rules based on a number of times each of the rules was previously applied, a severity meter set for each of the rules, or assets affected by each of the rules, wherein the network information includes a list of wireless access point devices and associated parameters used for accessing one or more wireless networks, and wherein a location for each of the wireless access points is determined.