You might want to have a look at the NIST document"Digital Identity Guidelines": NIST Special Publication 800-63B[^] The guidelines have been updated this year, and specifically reverse some prior password policies that have been found to encourage bad behavior, like using post-it notes stuck to your monitor. It's boring reading though, here's a good summary: NIST 800-63 Password Guidelines - Security Boulevard[^]

A cell of politicians, since that's where so many of them belong.

Marc Clifton wrote:

you have to break a few eggs to get the job done

I know a fellow who uses that expression often, mostly to excuse the collateral damage caused by various upgrades. I'm glad he doesn't run an airline.

Worst boss I ever had was when I was self-employed.