Company-wide password reset backfired hard at my old job
My last employer made everyone reset their passwords on the same day every 90 days. After the second reset, our IT help desk got flooded with 200+ tickets from people writing passwords on sticky notes. They literally had a stack of yellow Post-its under keyboards all across the office. Has anyone else watched a security policy turn into a bigger vulnerability than the one it was supposed to fix?