Method and system for assessing and mitigating access control to a managed network

A method, system, and computer program product for controlling access to a network that adds a new type of policy and new types of mitigation based on profiles of historical information about what the device did since last connected. This historical information will be used to create a historical based risk profile to determine whether or not to grant a device access to the network. A method for controlling access to a network comprises the steps of detecting that a device is attempting to obtain access to the network, examining historical information relating to behavior of the device while the device was not accessing the network, and determining whether to grant access to the network based on the historical information.