Password Policy

Embrace strong password policy

Include a strong password policy in your corporate policy document. Institute mandatory but easy to follow steps for password creation  and expiration that ask every user account owner to ensure that passwords do not include breached, prohibited, or well known words.

Here is simple steps to include in your cyber security and governance policy.

• Set minimum password length to 12 letters or more

• Use both upper and lower case letters

• Include numeric digits and symbols

• Do not use dictionary or known words

• Use different password for each user account

• Use a strong password manager to manage your passwords

• Combine multi-factor authentication for account access

• Combine with a session expiration policy