24. The computer program product of claim 23 , wherein the derived document control policy comprises a derived security policy and a derived retention policy, and deriving the document control policy comprises: combining Boolean values of security policies associated with the child nodes of the parent node to form the derived security policy; and combining identified separate cases, which depend on variables associated with the multiple document control policies associated with child nodes, to form the derived retention policy.
23. The computer program product of claim 21 , the operations further comprising deriving a document control policy for a parent node in the document control policy ontology based on a combination of multiple document control policies associated with child nodes of the parent node in the document control policy ontology; and associating the derived document control policy with the parent node in the document control policy ontology.