Some regulatory compliance requirements, such as BASEL II, are now requiring organizations to store and retrieve sensitive information--including passwords--in multiple parts so that no one person can maintain key secrets individually, Lieberman says.