I liked the linked document from the NCSC. They give practical advice on password expiry which I would love to adhere to...were I not having to follow PCIDSS th

I liked the linked document from the NCSC. They give practical advice on password expiry which I would love to adhere to...were I not having to follow PCIDSS that mandates that we set expiry to 90 days and has length and conplexity requirements. PCIDSS is a bad standard