Recall NIST SP $800-53$ Rev. $5-3\mathrm{.}1$ and then consider the following:Are the controls comprehensive?If implemented, will they adequately protect an organization?Are they appropriate for all organizations?Are they cost prohibitive?Should all organizations be encouraged to adopt them as a standard?Are there other access control recommendations that organizations should consider?