ISC2 CISSP Practice Question
An organization implements a system where access to sensitive information is regulated based on user roles assigned in a dynamic manner, taking into account multiple contextual factors such as location and time. This approach is an example of a comprehensive access control policy.
False
True