Craft a robust password policy whilst understanding where your staff are regarding their understanding of data security.