Beena is granted access to her organization’s customer information because she is a data steward; her access occurs between 8 a.m. and 5 p.m., and it is occurring from a known workstation that has passed security checks. What type of access control scheme is in use?

A set of rules that defines who can access the data has determined if Beena is granted access. Here, rules assess her role, the time of day, and the workstation’s status. This is not accomplished using a classification or clearance system like MAC uses, and it does not rely on just an attribute like Beena’s location or other information about her.