Our It department gut a bug up it's butt a coupe years ago, probably handed down from the higher ups, that we were required to change both our logins and email passwords every 2 weeks. They couldnt be the same for both accounts at the same time, and they couldn't be a previously used password. We were also forbidden from writing the passwords down.
During a company wide meeting, the issue of people getting written up for writing down their passwords came up. I stood up, took out my cheat sheet, and asked who else in the room had their passwords on a piece of paper on them. 80% of the 150 people in the room held up theirs, and the other 20% said they had them in their desks.
Now it's every three months, and there's only one account.
