Which practice is recommended to strengthen employee authentication and access control when safeguarding proprietary information?

• A. Require employees to use complex passwords or passphrases.
• B. Use simple numeric PINs for all accounts.
• C. Share passwords among staff to reduce help desk calls.
• D. Never change passwords after initial setup.

Answer: (A)

Strengthening employee authentication and access control hinges on making it harder for someone to guess or brute-force credentials. Complex passwords or passphrases greatly increase the number of possible combinations, boosting entropy and making automated attacks far less likely to succeed. A strong password can be long and incorporate a mix of upper and lower case letters, numbers, and symbols, or a memorable but random-seeming passphrase formed from several words. This approach keeps proprietary information safer even if attackers target individual accounts. In contrast, simple numeric PINs have low entropy, sharing passwords among staff erodes accountability and broadens risk, and never changing passwords leaves credentials vulnerable for a long time. So, requiring complex passwords or passphrases is the best practice for solid authentication and access control.