Inadequate Password Policies Can Lead to Problems

This paper explores how, overall, the security administrator's duty is to reasonably ensure the security of the network, and how he/she can do this by setting policies commensurate with the risks of losing data, financial damage, theft of information, public embarrassment and/or reduction in share/stake-holder value. The administrator should set policies to cover how passwords are stored, how they are changed, the frequency at which they should be changed, and the fiduciary duties of the users, management and network administrators. Once clearly communicated, the password policies work toward a good start to security in the workplace.