Your manager is concerned about the security of the IC system. He overheard several agents talking who said that they use their birthdate for their password and they use them over and over again. The company has a published policy for IC passwords explicitly stating this is unacceptable.

How can you ensure that all users are following a company policy for secure IC passwords?