PCI compliance requires we change our login passwords every two months. This to me seems to just encourage users to create insecure passwords and sticky notes w

PCI compliance requires we change our login passwords every two months. This to me seems to just encourage users to create insecure passwords and sticky notes with them written down somewhere in/on their desk.