Does your authorization system consider contextual attributes such as geolocation, time of access, or device security posture when making access decisions?

Context-aware authorization enhances security by evaluating not just who is requesting access, but also the circumstances of the request. For example, your system might deny access to sensitive data when requested from an unusual location, outside business hours, or from a device that doesn't meet security requirements.

Evidence of implementation could include documentation of your authorization policy rules showing contextual factors, screenshots of configuration settings in your identity management system that enable attribute-based access control, or logs demonstrating access decisions that were influenced by contextual attributes.