1. A computer implemented method for indexing security policies, the computer implemented method comprising: determining a policy vocabulary to form a set of policy elements creating an index from the set of policy elements; receiving a request to form requested policy elements; locating requested policy elements in the index to form a set of returned policy elements; and identifying a rule for the returned set of policy elements.