A security audit recently revealed that an administrator is using the same password of C1$c0448845217 for his personal account across multiple systems. What must be implemented by the company to…

Centralized user authentication helps manage identities and access but doesn't inherently prevent users from choosing the same password for different systems, especially personal ones outside the centralized system's scope, or if the centralized system itself allows weak passwords.

Role-based access control (RBAC) manages what users can access based on their roles, but it doesn't dictate password complexity or prevent password reuse across systems.

Security awareness training educates users, including administrators, about common security risks like password reuse, phishing, and the importance of adhering to security policies, directly addressing the human behavior aspect that led to the audit finding.

Strict password policies enforce complexity, length, and rotation within the systems where they are applied, but they cannot directly prevent a user from reusing that same password on other, external, or less-controlled personal systems.