Maintaining Salesforce and managing large sets of data, security becomes very important. As an Administrator for a local hardware and software company I prepared for an ISO 27001 audit. As a company we succesfully passed the audit.
I created a password policy, and documented the policies. As an org, we adhered to the new password policies instituted.