6. A system comprising: a first memory wherein the first memory is configured to store a control statement; a second memory wherein the second memory is configured to store a policy; a processor, coupled to the first memory and the second memory, and configured to execute instructions for linking the policy to the control statement by creating a link between the policy and the control statement, wherein the link comprises a mapping between the policy and the control statement, and the policy is configured to implement the control statement, storing the policy and an identifier of the link, wherein the identifier comprises a record in a relational database, and mapping the control statement to an operational guideline of a plurality of operational guidelines, wherein the control statement is configured to operate as an interface between the operational guideline and the policy, the operational guideline comprises at least one of a regulation, best practice, or a standard, and the control statement is one of a set of control statements formulated to ensure compliance with the operational guideline; defining the control statement, wherein said defining the control statement further comprises reducing the at least one regulation, best practice, or standard to one or more basic concepts comprising the at least one regulation, best practice or standard, and expressing the one or more basic concepts in an atomic form; and a display configured to display a list of control statements linked to the policy, wherein the list of control statements comprises the control statement.
6. A system comprising: a first memory wherein the first memory is configured to store a control statement; a second memory wherein the second memory is configured to store a policy; a processor, coupled to the first memory and the second memory, and configured to execute instructions for linking the policy to the control statement by creating a link between the policy and the control statement, wherein the link comprises a mapping between the policy and the control statement, and the policy is configured to implement the control statement, storing the policy and an identifier of the link, wherein the identifier comprises a record in a relational database, and mapping the control statement to an operational guideline of a plurality of operational guidelines, wherein the control statement is configured to operate as an interface between the operational guideline and the policy, the operational guideline comprises at least one of a regulation, best practice, or a standard, and the control statement is one of a set of control statements formulated to ensure compliance with the operational guideline; defining the control statement, wherein said defining the control statement further comprises reducing the at least one regulation, best practice, or standard to one or more basic concepts comprising the at least one regulation, best practice or standard, and expressing the one or more basic concepts in an atomic form; and a display configured to display a list of control statements linked to the policy, wherein the list of control statements comprises the control statement. 8. The system of claim 6 wherein the processor is further configured to execute instructions comprising: defining the policy in response to the control statement, wherein said instructions for defining the policy further comprise instructions for determining a presence of an asset implicated by the control statement, and expressing an implementation of the control statement for the asset.