Access control within a network is established by combining multiple factors to prevent unauthorized access to a computer and/or network target system. The factors which may be combined are selected from a combination of three main factors confirmation that the accessing device which is attempting access is by an authorized user; the access request is made by a device that corresponds to an authorized degree of importance; and the accessing device is connected from a network that corresponds to the authorized degree of importance.