Password control: Password strength, not easily guessed, changed regularly, automatic system request, re use of passwords prohibited, cancelled on resignation/dismissal, used for authorisation, limit access on a system, certain time of day, authorisation levels linked.
Strength: Minimum of 6 characters, alpha numerical, CaPiTaL letters and small caps, special ch@r@cter$.