Adjust passwords on a regular basis: end users needs to be compelled to alter their passwords every 30-forty five days to reduce an attacker’s window of opportunity. Leaving passwords Energetic for far too lengthy provides an attacker indefinite use of a compromised account.