You are responsible for deciding the authentication methods your company's internal employees and systems. Please describe how you would approach defining authentication, authorization and access control including a password policy, password scheme (length, characters), password rotation, training, etc. Think about not only passwords to "log into the network", but also internal applications within your company. Please describe the reason WHY you decided WHAT you decided. Again this particular discussion is focused on internal company password alternatives.