To Ensure Minimum Opportunity to Access Data, Passwords

To ensure minimum opportunity to access data, passwords

A) need to be changed once a year.
B) should be lengthened when staff changes position.
C) can be any four letters in a person's name for ease of remembering.
D) should be changed every ninety days or sooner.