Patent ID: 8539548

Claim:
A method, comprising: providing, at a security policy administration (SPA) information handling system (IHS) in an enterprise network, a security policy administration (SPA) tool that is responsive to a first tier level security administrator and a plurality of second tier level security administrators, wherein the plurality of second tier level security administrators are subordinate to the first tier level security administrator; providing, at data centers, respective security enforcement IHSs, wherein the security enforcement IHS at each data center includes a respective security enforcement tool; receiving, by the SPA tool, a policy generation request from a first user; testing, by the SPA tool, to determine if the first user is an authorized first tier level security administrator; generating a policy, by the SPA tool, in response to the policy generation request if the first user is determined to be an authorized first tier level security administrator, wherein the generating of the policy includes: generating, by the SPA tool, a first policy configuration that is customizable by an authorized second tier level security administrator, thus providing a first customizable policy configuration; storing, by the SPA tool, the first customizable policy configuration in a policy configuration database; transmitting, by the SPA tool, the first customizable policy configuration to a target IHS within a particular data center; receiving, by the SPA tool, a policy customization request from a second user; testing, by the SPA tool, to determine if the second user is an authorized second tier level security administrator; and modifying, by the SPA tool, the stored first customizable policy configuration as requested in the policy customization request of the second user if the second user is determined to be an authorized second tier level security administrator.