Impact Assessment
When passwords are compromised, this increases the chance of major security breaches occurring, as these passwords are used to authenticate users when accessing information, which in many situations will be sensitive. This can lead to compromised data, compromised systems, and people using your accounts without your knowledge. This information could not only hurt a company’s financial situation, but also its image.
As with any pharmaceutical company, Mutandum needs to maintain confidentiality of any new or upcoming medications. Securing their information is a priority, as competition in the generic drug market is extremely high as the case points out. On average, it takes companies 12 years to develop a new product, and costs anywhere between $400 million to $1 billion. Competition in the generic drug market is fierce and often results in a 70-80% loss of …show more content…
The success can be measured based on various metrics that can be measured easily and timely. Having metrics already defined is a good way to think about the solution to be proposed.

First and most important metric is to know and monitor any possible security or password breaches and if there are, what’s the impact. Another important metric is to determine or measure the awareness and concern among the employees about the security. Some firms have taken up Web Based Trainings (WBTs) as way to train and also test employees on password policies. The results of these WBTs are also taken into account during the annual review of the employee.

There are some algorithms (for eg: use of entropy) as well that work as testing metrics for password creation policies by attacking large sets of revealed passwords. These algorithms can also be used to test the company’s password