A system associated with security policy implementation, comprising: (a) a security model data store containing a plurality of potential security models, each accessible by multiple external applications; (b) a security specifications data store containing a plurality of potential security specifications, each accessible by the multiple external applications; and (c) a security policy engine computer platform, coupled to the security model data store and the security specifications data store, adapted to: (i) receive from an external application an indication identifying a security policy package, wherein the indication includes an identifier or a link, (ii) retrieve, based on the received indication, one of the potential security models from the security model data store, wherein the retrieved security model defines how data and services are secured, (iii) retrieve, based on the received indication, one of the potential security specifications from the security specifications data store, wherein the retrieved potential security specification is associated with a list of rules and permissions for the external application that are defined based on the retrieved security model, and (iv) arrange for a security policy package to be implemented for the external application, the security policy package consisting of the retrieved potential security model and the retrieved potential security specification, wherein the security policy package is assigned to a solution, wherein the solution includes a software development kit to integrate between the external application and the security policy package, wherein when a new security model is introduced, the software development kit is updated with an extension for the new security model so that the external application can work with security specifications based on the new security model. (a) a security model data store containing a plurality of potential security models, each accessible by multiple external applications; (b) a security specifications data store containing a plurality of potential security specifications, each accessible by the multiple external applications; and (c) a security policy engine computer platform, coupled to the security model data store and the security specifications data store, adapted to: (i) receive from an external application an indication identifying a security policy package, wherein the indication includes an identifier or a link, (ii) retrieve, based on the received indication, one of the potential security models from the security model data store, wherein the retrieved security model defines how data and services are secured, (iii) retrieve, based on the received indication, one of the potential security specifications from the security specifications data store, wherein the retrieved potential security specification is associated with a list of rules and permissions for the external application that are defined based on the retrieved security model, and (iv) arrange for a security policy package to be implemented for the external application, the security policy package consisting of the retrieved potential security model and the retrieved potential security specification, wherein the security policy package is assigned to a solution, wherein the solution includes a software development kit to integrate between the external application and the security policy package, wherein when a new security model is introduced, the software development kit is updated with an extension for the new security model so that the external application can work with security specifications based on the new security model. (i) receive from an external application an indication identifying a security policy package, wherein the indication includes an identifier or a link, (ii) retrieve, based on the received indication, one of the potential security models from the security model data store, wherein the retrieved security model defines how data and services are secured, (iii) retrieve, based on the received indication, one of the potential security specifications from the security specifications data store, wherein the retrieved potential security specification is associated with a list of rules and permissions for the external application that are defined based on the retrieved security model, and (iv) arrange for a security policy package to be implemented for the external application, the security policy package consisting of the retrieved potential security model and the retrieved potential security specification, wherein the security policy package is assigned to a solution, wherein the solution includes a software development kit to integrate between the external application and the security policy package, wherein when a new security model is introduced, the software development kit is updated with an extension for the new security model so that the external application can work with security specifications based on the new security model.