1. A method for determining discrete policy target groups for information objects stored in an enterprise IT system, comprising: providing cleansed information about information objects stored on the enterprise IT system; determining criteria for sorting the information objects; carrying out initial sorting of the information objects, resulting in an initial set of clusters; clustering the information objects into discrete policy target groups based on the information about the information objects and the initial set of clusters; and computing human-understandable names and definite descriptions for policy target groups.