The surgery manager will create a password policy for staff.

Changing passwords regularly is one rule they will include.

Give two other rules they could include in this policy.