Using an access control model in an organization

Discuss the importance of using an access control model in determining how employees in an organization should gain access to resources? Should different resources have different access controls? Provide an example of a resource and the access control you think it should have.