M4

• Implement a password policy that, for example, specifies the required password strength and how often passwords must be changed.
• Change passwords according to your password policy, but at the latest when employees leave the company.
• Assign individual passwords. Do not use the same password for multiple roles.