A method implemented by a single computing device having a first perimeter and a second perimeter with access restrictions on resources between the first perimeter and the second perimeter, the first perimeter and the second perimeter each defining a logical separation of computing resources within a persistent memory of the single computing device, the computing resources including data, the method comprising: receiving an input through a user interface of the single computing device requesting a transfer of data from the first perimeter to the second perimeter; identifying a first cross-perimeter policy associated with the first perimeter and a second cross-perimeter policy associated with the second perimeter, at least one of the first and second cross-perimeter policies defining, for a respective perimeter, one or more criteria for permitting the transfer of data, and at least one of the first and second cross-perimeter policies defining, for a respective perimeter, one or more criteria for requiring generation of an audit trail; determining, based on the one or more criteria for permitting the transfer of data defined by the first and/or second cross-perimeter policies, whether the transfer of data is permitted; transferring data from the first perimeter to the second perimeter on the single computing device in response to the request, when it is determined that the transfer of data is permitted; and determining, based on the on the one or more criteria for requiring generation of an audit trail defined by the first and/or second cross-perimeter policies, whether generation of the audit trail is required; generating a data transfer audit trail including transfer event information about the data transfer, when it is determined that generation of the audit trail is required. receiving an input through a user interface of the single computing device requesting a transfer of data from the first perimeter to the second perimeter; identifying a first cross-perimeter policy associated with the first perimeter and a second cross-perimeter policy associated with the second perimeter, at least one of the first and second cross-perimeter policies defining, for a respective perimeter, one or more criteria for permitting the transfer of data, and at least one of the first and second cross-perimeter policies defining, for a respective perimeter, one or more criteria for requiring generation of an audit trail; determining, based on the one or more criteria for permitting the transfer of data defined by the first and/or second cross-perimeter policies, whether the transfer of data is permitted; transferring data from the first perimeter to the second perimeter on the single computing device in response to the request, when it is determined that the transfer of data is permitted; and determining, based on the on the one or more criteria for requiring generation of an audit trail defined by the first and/or second cross-perimeter policies, whether generation of the audit trail is required; generating a data transfer audit trail including transfer event information about the data transfer, when it is determined that generation of the audit trail is required.