Good work from the Department of Interior Inspector General. Their conclusions apply just as well to law firms. The length of a password is more important than complexity. It’s better to have a phrase like JonesAndSallyLoveBaskingInSunshine than #si30_584JKL.
Implementing this advice is a no-brainer, since a well chosen phrase is easier to remember than