findprotected.com

belliott · Joined: 29 Aug 2004 Posts: 25

Article title: What is effective password policy

AKS-Labs wrote: The most useful approach to password policy is to view password-associated risks differently in different environment. Passwords must be hard-to-guess, however they should be memorable. The risk of password interception increases greatly if the password is written down on paper or stored in a specific file. Passwords must not include personal information, names, solely numbers or common words, as these are vulnerable to dictionary attacks. Strong passwords should contain at least seven to eight characters in a random combination of letters, numbers and symbols. To memorize a complicated password, one can use a mnemonic technique or a phrase, replacing each character in the password with a word.

Read article: What is effective password policy

Oliver Clish · Joined: 24 Feb 2005 Posts: 4

belliott wrote: Article title: What is effective password policy

AKS-Labs wrote: The most useful approach to password policy is to view password-associated risks differently in different environment. Passwords must be hard-to-guess, however they should be memorable. The risk of password interception increases greatly if the password is written down on paper or stored in a specific file. Passwords must not include personal information, names, solely numbers or common words, as these are vulnerable to dictionary attacks. Strong passwords should contain at least seven to eight characters in a random combination of letters, numbers and symbols. To memorize a complicated password, one can use a mnemonic technique or a phrase, replacing each character in the password with a word.

Read article: What is effective password policy

Another common article about what is good computer security policy:
Article title: What is good security policy?

SecurityPark wrote: If asked the following question, “How good is your Security Policy?” what would the response be from your organisation? Chances are that most respondents would initially reply in a positive manner. But what does ‘good’ really mean in the context of a security policy?

Read article: What is good security policy?