1. A method, comprising: receiving, at a server, an infrastructure change request issued from a requesting entity, the infrastructure change request concerning an agile information technology environment; describing and classifying, by the server, the infrastructure change request on the bases of a nature and character of the agile information technology environment, and the requesting entity's specification of a nature and character of data intended to be collected, operated upon, and/or generated by an application running in the agile information technology environment in which the requested infrastructure change will be instantiated; processing, by the server, the infrastructure change request according to data-centric, risk-based metrics that have associated security policies; based on the security policies, the server producing and presenting recommendations for instantiations of the requested infrastructure change using, where available, pre-approved solutions for the requested infrastructure change, and when no pre-approved solution for the requested infrastructure change is available, derived recommendations, the server including with the derived recommendations a list of approvals required before the requested infrastructure change can be provisioned, and a list of approvers required to give said approvals; and upon receipt of the approvals, one or more of the derived recommendations is added to a library of pre-approved solutions for infrastructure change requests.