1. An access control device comprising: an interface, said interface receives a request to access a virtual private network (VPN) from a user and metadata of the request to access the VPN, the request to access the VPN including a user identification, the metadata including: confirmation of the user identification by an entity physically proximate the user, the entity physically proximate to the user including a coworker of the user, and a VPN tunnel endpoint; a database connected to said interface, said database including relationship data indicating a relationship between an individual assigned the user identification and the VPN, the relationship data indicating a relationship between an individual assigned the user identification and the VPN, wherein the relationship data includes a degree of risk of compromise; a processor connected to said database, said processor queries said database with the user identification and the metadata to identify identified relationship data; and a rules engine connected to said processor, said rules engine receives the identified relationship data from said processor and selects at least one security measure based on the identified relationship data, said rules engine: selects a greater security measure the farther the relationship between the individual assigned the user identification and the VPN, and selects a lesser security measure the closer the relationship between the individual assigned the user identification and the VPN.