Suppose a worker in your organization frequently forgets his or her password, attempts to use obvious passwords, re-use old passwords, and sometimes gets locked out of the system for failed log-in attempts. How would you deal with such a user? What organizational policies should be in place for handling user behaviors of this kind?