Complex sentence: In general, all compromised authentication material (such as passwords) must be replaced since it is rarely possible to confirm that a system which was affected has not been compromised.
Split into simpler sentences: In general, all compromised authentication material (such as passwords) must be replaced. It is rarely possible to confirm that a system which was affected has not been compromised.