81% of cyberattacks on utilities compromise identity systems such as Active Directory, Entra ID, and Okta.

Simple passwords like Pass@123 and P@ssw0rd, which meet basic Active Directory requirements, are frequently used, increasing the risk of password reuse.

Requiring an Active Directory password length of at least 13 characters would significantly reduce the risk of cloud application password reuse.