Use of Multifactor Authentication: A single authentication type can lead to easily breaches, for example, only username/password as an authentication type mechanism, and thus various attacks succeed against them. Use of Multifactor Authentication such as SMART card, Biometrics, password to strengthen the authentication check of Role-Based Access Control.
Strong Password Policy: There must be a password policy that directs the use of strong passwords organization-wide as it can reduce the attack surface of passwords.
Secure Password Files: Passwords must be secured at disk using encryption and while in transit over the wire by not passing them in clear text and also not in URL directly thus making Role-Based Access Control a secure one.
