Frequency of passwords.

The security measures implemented must be effective. When it is planned to establish the frequency with which the passwords of the users must be changed, it must be avoided that the users who have the expired password, can continue accessing the information system.