Evolving from security to policy management

Many policies, many systems

Discrete policy domains, systems

Policy Management Systems

Is this evolution a good or bad thing?