Generating and implementing organizational security policies

A computing system for implementing security policies, the computing system comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media that store instructions that, when executed by the one or more processors, cause the computing system to perform operations, the operations comprising:
• receiving an access request associated with a particular employee and a particular computing resource;
• accessing a user-customized security policy associated with the particular employee or the particular computing resource, wherein the user-customized security policy is defined using one or more references to a set of organizational data comprising employee data records for employees of an organization;
• determining a policy evaluation outcome comprising:
• comparing the one or more references to the set of organizational data with an employee data record associated with the particular employee;
• executing one or more query language expressions against the set of organizational data to determine a query result, the set of organizational data comprises an object database represented as a graph with nodes and edges;
• traversing the graph based on the query language expressions to determine the query result;
• and
• determining the policy evaluation outcome based at least in part on the query result;
• and
• providing a response to the access request based at least in part on the policy evaluation outcome.