Why it matters
A reused password turns someone else's breach into yours, and a backup nobody has ever restored isn't a backup: it's an assumption. Neither one tells you on its own.
What it solves
Continuous password hygiene auditing and verification that your backups actually run, with alerts on missed or failed backups.