Password policies[Mandatory]

Appropriate password policies should be defined covering password expiration period, password complexity and allowed login attempts. Adoption of the NIST password policy guidelines is recommended.