1. A method for calculating a total risk of an information access request in a system, comprising the steps of: setting a spatial risk model with a plurality of axis, wherein each axis representing a type of risk; receiving by an access request monitoring unit an information access request; determining a risk of the information access request to a database for each of the plurality of axis according to a user defined policy for each of the plurality of axis; and calculating a total risk by determining a distance of a point representing the total risk from a center of the plurality of axis.