How you others organize group policies that are based on NIST controls? I can see AD getting out of hand quickly if you create individual objects for each control. Grouping them by groups or other?