Suppose you are a security manager at a medium-sized company. Several people on the staff are reluctant to follow the company’s rules regarding the use of passwords. For example, these users may post their passwords in a conspicuous place, routinely use easily guessed passwords, or resist changing their passwords on a regular basis. How would you win such workers over to the notion that passwords must be used correctly? For the moment, set aside the premise that such users might be automatically shut out of the system for failing to use passwords in the prescribed manner. Approach the issue as though you must convince these users that the password system is in their best interest.