Although the report indicates security training may not be effective as employers would hope, it is still important to educate employees. When educating employees on cyber security, it important to teach why password hygiene is important. Databases and online services are being breached daily and leaked or stolen passwords from these breaches are constantly being traded or sold. Reusing a password is an extremely risky and dangerous practice. Passwords should be unique, complex, and changed routinely. Employees should use a password manager, so they do not have to memorize several different passwords. Lastly, employers should require multi-factor authentication (MFA) to add an additional level of security to employee accounts.

https://www.helpnetsecurity.com/2021/08/16/employees-reusing-personal-passwords/?web_view=true