[{"pubDate":"Mon, 05 Oct 2026 08:07:08 +0200","url":"https://www.ftc.gov/business-guidance/blog/2017/08/stick-security-require-secure-passwords-authentication","titre":"Stick with Security: Require secure passwords and authentication","id":3197409,"description":"Stick with Security: Require secure passwords and authentication lfair August 11, 2017 | 10:47AM Stick with Security: Require secure passwords and authentication By Thomas B. Pahl, Acting Director, FTC Bureau of Consumer Protection To make it harder for hackers to bluff their way onto a computer network, careful companies follow the advice of Start with Security and require strong authentication practices . We’ve considered FTC settlements, closed investigations, and the questions we get from businesses about implementing good authentication “hygiene.” Here are some tips on using effective authentication procedures to help safeguard your network. Insist on long, complex, and unique passwords. A password’s very reason for being is to be easy for a user to remember, but hard for a fraudster to figure out. Obvious choices like ABCABC, 121212, or qwerty are the digital equivalent of a “hack me” sign. Furthermore, experts have determined that passphrases or longer passwords are generally harder to crack. The smarter strategy is for companies to think through their standards, implement minimum requirements, and educate users about how to create stronger passwords. Also, when you install software, applications, or hardware on your network, computers, or devices, change the default password immediately. And if you design products that require consumers to use a password, configure the initial set-up so they have to change the default password. Example: A staff member attempts to select payroll as the password for the database that includes employee payroll information. The company sets up its system to reject an obvious choice like that. Example: To access the corporate network, a business allows employees to type in their username and a shared password common to everyone who works there. Employees are also allowed to use that shared password to access other services on the system, some of which contain sensitive personal information. The more prudent policy would be to require strong, unique passwords for each employee and to insist that they use different passwords to access different applications. Example: At a staff meeting, a company’s IT manager offers tips for employees about good password hygiene. She explains that passphrases or longer passwords are better than short passwords based on standard dictionary words or well-known information (for example, a child’s name, a pet, a birthday, or a favorite sports team). By establishing a more secure corporate password standard and educating employees about implementing it, the IT manager is taking a step to help her company reduce the risk of unauthorized access. Store passwords securely. A company’s first line of defense against data thieves is a workforce trained to keep passwords secret. But even the strongest password is ineffective if an employee writes it on a sticky note on her desk or shares it with someone else. Train your staff not to disclose passwords in response to phone calls or emails, including ones that may appear to be coming from a colleague. Con artists have been known to impersonate corporate officials by spoofing phone numbers or email addresses. A compromised password poses a particular risk if it can be used to open the door to even more sensitive information – for example, a database of other user credentials maintained on the network in plain, readable text. Make it difficult for data thieves to turn a lucky password guess into a catastrophic breach of your company’s most sensitive data by implementing policies and procedures to store credentials securely. Example: A new employee gets a call from someone who claims to be the company’s system administrator. The caller asks him to verify his network password. Because the new staffer learned about impersonation scams at an in-house security orientation, he refuses to disclose his password and instead reports the incident to the appropriate person in the company. Example: A company keeps user credentials and other passwords in plain","source":"FTC USA Business Blog Posts"},{"source":"BEREC Office","description":"Public consultation on the draft BEREC Work Programme 2027 yannick.stephan Thu, 01/10/2026 - 09:00 Breadcrumbs Public Consultations & Calls for Inputs Deadline to submit contributions:  31 October 2026 In January this year, BEREC adopted the Outline BEREC Work Programme 2027 , which reflected BEREC's objectives for the upcoming year. BEREC launched a first Call for inputs on the Work Programme 2027 from 27 February to 15 April. During the call for proposals, several additional actions were identified. Considering the early input received, during the 68th BEREC ordinary meetings (1-2 October 2026), the Board of Regulators adopted the draft BEREC Work Programme 2027 [BoR (26) 142] for public consultation. Background BEREC prepares its annual work programme in accordance with Article 21 of the BEREC Regulation and the BEREC Strategy 2026-2030 to guide how it organises and prioritises its work towards clearly defined objectives. The 2027 draft work programme was developed inclusively and transparently, with contributions from various stakeholders. This approach helps ensure that BEREC remains responsive to market needs, regulatory developments, and end-user expectations. Aim The BEREC Work Programme 2027 aims to align with the BEREC Strategy 2026-2030 and its five strategic pillars: Promoting full connectivity and the Digital Single Market; Supporting competition-driven and open digital ecosystems; Empowering end-users; Contributing to sustainable, secure, and resilient digital infrastructures; Strengthening BEREC’s capabilities and continuous improvement. The work programme will also take into consideration priorities set for BEREC’s institutional and international cooperation. Furthermore, the 2027 work programme has been developed against the backdrop of the ongoing review of the regulatory framework and the European Commission’s proposal for a Digital Networks Act, published in January 2026. This piece of legislation is meant to be the cornerstone shaping the future of the sector in the EU. As an advisory body to EU institutions for electronic communications, BEREC is committed to providing expert, independent advice to co-legislators and the European Commission throughout the legislative procedure. BEREC also aims to provide support and advice on other relevant policy developments. In addition to the mandatory work foreseen in the EU regulatory framework, the BEREC work programme follows a multiannual approach, meaning some projects started in 2026 will be completed in 2027 and are therefore included as carryovers. Additionally, recurring items are considered by default. Submit your contributions The incoming BEREC Chair 2027, Alejandra de Iturriaga Gandini (CNMC, Spain), encourages all interested stakeholders to provide their views and contributions to the draft BEREC Work Programme 2027 by submitting them to BEREC-WP2027@DISTRO.BEREC.EUROPA.EU by 31 October 2026 . After submitting the contribution, you will receive an automatic acknowledgement email. If you do not receive this acknowledgement, please contact the BEREC Office. Contributions should be sent preferably in English, and, to facilitate processing of the responses, the comments provided should clearly refer to specific paragraphs of the document. In accordance with the BEREC policy on public consultations , BEREC will publish all contributions and a summary thereof, respecting confidentiality requests. In that regard, please clearly mark the parts you define as confidential. We strongly encourage all stakeholders to submit their contributions as early as possible. Contributions received after the above-mentioned deadline will not be taken into account. Privacy statement type Privacy Statement for Public Consultation Category Name Ongoing Public Consultations and Calls for Inputs Notify subscribers","id":3193166,"titre":"Public consultation on the draft BEREC Work Programme 2027","url":"https://www.berec.europa.eu/en/public-consultations-calls-for-inputs/public-consultation-on-the-draft-berec-work-programme-2027","pubDate":"Fri, 02 Oct 2026 08:34:17 +0200"}]