a) Describe three means of access control other than passwords which can be used to prevent unauthorised access to computer systems and data. Give examples of how they would be used and in what circumstances.
b) If passwords are the only option, suggest what should be included in the password policy to ensure the passwords are as secure as possible. Justify your suggestions.