In conclusion, we noted that the password controls settings for database server at operating system level (Linux) (Application and Database Sever) has not been designed and implemented according to the established password policy and leading practice.