6. The harmonized governance system of claim 1 , further comprising: a computer-based policy enforcement element (PEE) communicatively coupled to the respective management platforms and resources of the individual agile environments that make up the heterogeneous agile environment, the PEE configured to enforce and report authorization decisions of the PDE.
1. A harmonized governance system for a heterogeneous agile environment, comprising: one or more computing devices configured as: a computer-based policy administration element (PAE) communicatively coupled to respective management platforms of a plurality of individual agile environments that make up the heterogeneous agile environment, the PAE configured to administer and report governance policies, including rules, roles and assignment to resources of the heterogeneous agile environment according to abstracted and normalized (i) representations of the resources, (ii) operations which are performed by and on said resources, and (iii) roles assignable to one or more subjects that will interact with said resources, and (iv) respective attributes of said representations, operations and roles; and a computer-based policy decision element (PDE) communicatively coupled to receive indications of attempted governance operations by the one or more subjects to resources within the individual agile environments that make up the heterogeneous agile environment, the PDE configured to determine and report whether the attempted governance operations should be permitted or not; one or more data sources accessible to the PAE and the PDE storing information about (i) the one or more subjects and respective attributes thereof, and (ii) resources of the heterogeneous agile environment and respective attributes of said resources, wherein different respective ones of the individual agile environments that make up the heterogeneous agile environment have individual, associated access policies for resources within the respective individual agile environments; each respective individual agile environment has an associated, respective access control system for subjects, resources, and operations of the respective individual agile environment; and the resources of each respective individual agile environment comprise one or more of computer systems, network systems, application containers, application systems, management systems, and storage systems, wherein the PAE is further configured to (i) in response to receiving a new attribute concerning a resource of an individual agile environment that is not yet mapped to an abstracted, normalized attribute of the heterogeneous agile environment, mapping the new attribute to the abstracted, normalized attribute, and saving the mapping of the new attribute to the one or more data sources, (ii) in response to receiving a new operation concerning a resource of the individual agile environment that is not yet mapped to the abstracted, normalized operation of the heterogeneous agile environment, mapping the new operation to the abstracted, normalized operation, and saving the mapping of the new operation to the one or more data sources, and (iii) define new abstracted access control policies based on the abstracted roles, abstracted operations and abstracted resources.