An apparatus and method for security object enhancement and management are provided. The apparatus and method make use of security objects in which security object data is encapsulated with security object attributes and methods defining the way in which the security object may be used. Because the security object is an encapsulated object, the security object may operate on itself to perform security object management operations. Furthermore, because the security object need not be linked to the items requiring security object protection a priori, the security object may be defined in any manner deemed appropriate by the user. As a result, users of the security objects are given greater freedom in defining the security object, the security object content type, and the way in which the security object may be used.