Watch this video on YouTube
Which of the following is NOT a best practice for implementing security controls according to NIST SP 800-53?