Discuss the advantages versus disadvantages of employing access control lists or role-based access control (rbac) versus a policy based approach like attribute-based access control (abac), defined in nist (2014) special publication 800-162: guide to attribute based access control (abac) definition and considerations, or context-based access control discussed in chapter 6 of the textbook. under which enterprise situations and environments might one be better approach than the other?

3. ranga ramasesh is the operations manager for a firm that is trying to decide which one of four countries it should research for possible outsourcing providers. the first step is to select a country based on cultural risk factors, which are critical to eventual business success with the provider. ranga has reviewed outsourcing provider directories and found that the four countries in the table that follows have an ample number of providers from which they can choose. to aid in the country selection step, he has enlisted the aid of a cultural expert, john wang, who has provided ratings of the various criteria in the table. the resulting ratings are on a 1 to 10 scale, where 1 is a low risk and 10 is a high risk. john has also determined six criteria weightins: trust, with a weight of 0.3; quality, with 0.2; religious, with 0.1; individualism, with 0.2; time, with 0.1; and uncertainity, with 0.1. using the factor-rating method, which country should ranga select? why? (2 points)