1. A computer-implemented method for generating a resource access control decision, the computer-implemented method comprising: modulating, by a computer, a user trust value associated with a user identifier of a user requesting access to a protected resource based on an estimated risk value associated with a context of a resource access request; and generating, by the computer, the resource access control decision based on the modulated user trust value associated with the user requesting access to the protected resource.