Key Considerations when Enhancing Access Control Programs