1. A method comprising: determining a set of accessor-accessible pairs, each accessor of each accessor-accessible pair having a predetermined level of access to the accessible of the accessor-accessible pair within a system topology; and, determining a mathematically canonical set of zones based on the set of accessor-accessible pairs, each zone having one or more accessors and one or more accessibles, the mathematically canonical set of zones used to manage access control of accessors and accessibles within the system topology.