Definition
Conditional access is a security control that enforces access policies based on specific conditions. It acts as a gatekeeper, evaluating multiple signals before granting or denying access to resources. This approach allows organizations to dynamically adjust security posture based on real time risk assessments. For instance, a user attempting to access sensitive data might be required to authenticate with multi factor authentication if they are connecting from an unfamiliar network. This differs from simple access control lists by incorporating dynamic risk factors into the decision making process. Conditional access is a key concept tested on certifications like Security+, CySA+, and CISSP.