After a series of account compromises and credential misuse, a company hires a security manager...

Evaluate tools that identify risky behavior and distribute reports on the findings.

Send quarterly newsletters that explain the importance of password management.

Develop phishing campaigns and notify the management team of any successes.

Update policies and handbooks to ensure all employees are informed of the new procedures.