Digital assets (e.g., files) are protected with a combination of more than one type of applicable security means. Techniques are developed to determine which of the security means to enforce in accordance with an access policy or policies when an access request is received. According to one embodiment, an interpreter or an access control module intercepts an access request from a requestor to access a secured file. The access control module is configured to determine if the access request is to be granted or denied to enforce security of the file through an access control technique and a cryptographic technique; and when the access request is granted, a key is retrieved to proceed with the access request.