A Lagos company had every password strong and still failed an audit. The three properties you were taught, the fourth one nobody teaches, and the ten minute exercise that gives you your first professional artefact.