Employees still choose phenomenally bad passwords often found in compromised password lists.
Auditing passwords is a potential control, but it is a reactive activity. Organizations need a security control that prevents users from choosing bad passwords (including those previously compromised).
Read what any modern password security tool must have and how Enzoic for Active Directory can protect your organization from credential compromise and account takeover.
