1. Protect Firm Data: The firm’s obligation to protecting the confidentiality of client information, as well as intellectual property, is first priority. Keeping passwords fresh and complex is a key part of that protection.
2. Protect Firm Resources: Too relaxed a password policy opens the door to outside entities accessing firm resources for their profit. An unsecured user account can allow the sending of thousands of SPAM messages hourly - reducing firm productivity and landing the firm email system on blacklists which prevent legitimate mail from being sent.
3. Prevent Hacker Exploitation: Bigger firms might be bigger targets, but smaller firms not focused on security are easier targets. Hackers will be happy to use your firm’s unsecure system for their malicious activities.