You're a Dumb Security Leader if You Mandate Password Rotation https://georgeguimaraes.com/youre-dumb-security-leader-if-you-mandate-password-rotation/
You're a Dumb Security Leader if You Mandate Password Rotation

NIST, Microsoft, and the FTC all agree: forced password rotation makes you less secure.

George GuimarĂ£es.