|
International research in the field of information security conducted by KPMG (www.kpmg.com) in the first quarter of 2006.
Respondents were asked, how many passwords a user in their company has to remember in order to get access to corporate systems?
We have received the following results:
- one password - 25%
- two - 38%
- three - 22%
- four - 9%
- five - 4%
- six or more - 2%
We also asked our respondents, how often they have to change passwords for access to applications in their organizations.
Results are the following:
- once a month - 44%
- every 1-3 months - 36%
- every 4-6 months - 7%
- more than in 6 months - 3%
- depends on a user - 6%
- never - 4%
Comments by KPMG
Most users have to remember two or more passwords at work and probably two or three passwords at home to get access to the banking services and Internet. Nowadays, a password usually consists of 5-8 symbols and has to be changed every month. That is why people write down their passwords or use predictable combinations for new ones. To guess/ to find users’ passwords is still the simplest way to get access to the system.
|