To propagate compliance and governance (C&G) policies, a parser including natural language processing is used to deconstruct a set of organization C&G policies from a set of C&G documents to identify and record a parsed set of categorized C&G policies. A configuration parameter analyzer deconstructs and parses a plurality of C&G configuration parameters of an application program to identify and record a set of application C&G configuration parameters each comprising a purpose and a unit of measure. A reconciliation arranger receives the set of categorized C&G policies and the set of application C&G configuration parameters and maps the categorized C&G policies for the correct purpose and the unit of measure to the respective application C&G configuration parameters. The reconciliation arranger propagates and secures the application program with the respective set of mapped application C&G configuration parameters from mapped C&G policies.