Just half (54%) of organizations have a written policy on length and randomness for keys for machine identities, but 85% have a policy that governs password length for human identities. Additional findings Less than half (49%) of organizations audit the length and randomness of their keys, while 70% do so for passwords.

Read full article on Help Net Security