Once the Anti Virus, Firewall, Backups, Up to date Windows and Staff training is complete, the Staff will be aware that best practices for password usage are at a minimum:
- Use complex passwords
- Use long passwords
- Don't re-use passwords for multiple services
And they should then be using a password manager. There are built in password managers in most browsers, but they are personal password managers, and that doesn't really work for a business that needs to be able to continue if the person is away for a couple of weeks well deserved holidays.
A company wide password manager and strategy is the answer to this and the way we recommend that you approach it for your business.