A company

$$

s IT policy states that passwords should contain

$1$

$6$

$$characters with a mix of letters, numbers, and special characters. After reviewing the implemented policy within the IT system, it is noted that the current security settings stated that passwords only need to be

$4$

$$character long and no multi

$-$

factor authentication is required. Answer the following questions.

a

$.$

$$What are the threats?

b

$.$

$$What are the risks?

c

$.$

$$How would you mitigate the risks?