There is no acceptable reason to use static passwords for corporate systems. 2018 will bring a healthy measure of regulatory remedy. The General Data Protection Regulation (GDPR) will come into full effect at the end of May 2018, affecting all companies that have either employees or clients within the EU. Review your incident response playbook for each of the following potential information security events (that I call the Dirty “Baker’s” Dozen): Malware compromise Ransomware attack Social engineering Business email compromise Third-party breach.”]
Source: https://www.csoonline.com/article/3246029/new-year-new-data-security-resolutions.html