Wondering why this is a should and recommend changing to shall.

Existing Wording:

This IG covers Security Label tagging, which supports, but is not sufficient to assure comprehensive security and privacy. Typically, the information in scope for this IG are patient sensitive. This IG SHOULD be used in combination with a Privacy and Security Framework and risk assessment based on the FHIR Security Module, which provides guidance to support Communications, Authentication, Authorization, Privacy Consent, Audit Logging, Provenance, etc.