Every decision is a gamble. You always know much less than what you don't know. So you need to play the odds, and also have a viable plan B (or...

There are certain circumstances when 'big data' can be useful. But too often it's a marketing shtick that can sell services and equipment to managers desperate to 'keep up'.

In many cases like this, the attacker is not particularly interested in any specific password. Get the list, then hammer it with several million common passwords. Probably only a percentage...

Viewing your company as a software company is likely a big mistake. Software is merely a TOOL, and should remain as so. Like the phone system, company vehicles, building etc.