A healthcare organization wants to grant access to patient records based on multiple dynamic conditions simultaneously: the user's department, the time of day, the sensitivity classification of the record, and whether the user is connecting from a corporate-managed device. Access decisions must evaluate all of these attributes together for each request. Which access control model best meets this requirement?