A system and method for analyzing a global security policy in a distributed computing environment. In one embodiment the security policy is a global security policy which is stored in, and managed by, a policy manager located on a server. In another embodiment the security policy is a local client security policy stored in an application guard located on a client server which manages access to various securable components of the distributed computing environment.