In modern cloud native architectures there are hundreds of cloud native features and services that are interacting with each other via access policies, events, network communications, etc. These services are often developed by different teams or business units each with their own life cycles. This makes it very difficult to infer boundaries of an application or workload. Within the oak9 platform, a Project is a flexible construct for an organization to help define the boundaries of a workload and enable oak9 to dynamically apply security requirements that organization is looking to meet for that workload.