1. An access control device comprising: an interface, said interface receives a request to access a system from a user and metadata of the request to access the system, the request to access the system including a user identification; a database connected to said interface, said database including relationship data indicating a relationship between an individual assigned the user identification and the system; a processor connected to said database, said processor queries said database with the user identification and the metadata to identify identified relationship data; and a rules engine connected to said processor, said rules engine receives the identified relationship data from said processor and selects at least one security measure based on the identified relationship data.