>absolutely were still using rotation policies That is not what I said. In fact, that's the complete opposite of what I said! Here, I'll add some emphasis for

>absolutely were still using rotation policies That is not what I said. In fact, that's the complete opposite of what I said! Here, I'll add some emphasis for you. >"~90% or more of the companies we consult with do not have forced arbitrary password rotations ___when we start our engagement with them___"