If you’re like most business leaders, you try to do everything you can to keep your company’s information safe.
You tell your employees to use strong passwords and offer regular trainings on phishing and the importance of internet security. You even make them change their passwords every six months or three months.
Although you know no system is foolproof, your rules should be as strict as possible in order to prevent a breach. Or should they? Evidence shows that stringent security measures can actually backfire, and can leave you more vulnerable than you were before.
https://www.helpnetsecurity.com/2018/08/21/stringent-security-measures/