1. A method of controlling access to resources, said method comprising: storing a policy decision for a resource in local memory, said policy decision received from a source of policy definitions, said policy decision based on a policy definition governing access to said resource and on requester identifying information provided to said source; receiving a request for access to said resource, said request comprising said requester identifying information; and evaluating said request using said policy decision in said local memory instead of referring said request to said source for evaluation.