A method for configuration policy extraction for an organization having a plurality of composite configuration items may include calculating distances in a configuration space between the composite configuration items. The method may also include clustering the composite configuration items into one or more clusters based on the calculated distances. The method may further include identifying configuration patterns in one or more of the clusters, and extracting at least one configuration policy based on the identified configuration patterns. A non-transitory computer readable medium and a system for configuration policy extraction for an organization having a plurality of composite configuration items are also disclosed.