Suppose a worker in your organization frequently forgets his password, attempts to use obvious passwords, reuses old passwords, and sometimes gets locked out of the system for failed login attempts. How would you deal with such a user? What organizational policies should be in place for handling user behaviors of this kind?