Organizations often struggle with understanding the specific access control requirements of the certification, ensuring that access controls are consistently implemented across the organization, and managing the complexity of access rights for different users and systems. Maintaining up-to-date access controls as employees join, move within, or leave an organization can also be difficult.