Utilizing the file that was provided by your network administrator, I conducted the password audit to determine the usernames of those in the file whom were using weak passwords. As a result of this password audit, I discovered that 94 percent, or 29 of the 31, of the usernames that were provided found to be using weak passwords that were either easily guessable or were in an extraordinary large list of commonly used passwords.

As a result of my findings and as per your request, I have worked to design and develop 2 password policies for the D1 and Z7 business units. As you had previously stated, the departments are entirely separated based on the types of sensitive data that they handle. The first password policy to be implemented will cover the D1 department which deals with extremely sensitive and top secret information. The second policy will be implemented to cover the Z2 department which deals in much less sensitive data than the previous department.

The password policy for the D1 department will require extremely strong passwords which must meet certain criteria including the length, alphanumeric characters, and special characters and symbols. The policy for the Z7 department will be less rigorous, however, will still have sufficient password requirements to prevent any breaches of company data. While both departments will need to use strong passwords, the D1 department will have much higher and more stringent requirements due to the fact that this department deals with highly sensitive and top secret documents.

Passwords are the keys to the vault of your company’s data. Passwords that are chosen poorly can and will result in unauthorized access and exploitation of your company’s valuable data and resources. As a result, all users including contractors and vendors whom have access to your company’s systems are responsible and should be required to take the appropriate steps to ensure that sensitive data stays exactly that, sensitive.