Comment by h4kunamata

Anything that generates fatigue doesn't work. Passwords expiring every 2 months?? Users will user password like "test1" "test2" test3" and so on.

Companies don't even have a password manager so few employees use the browser to save passwords, others use their own password manager which comes with its own security risks like that service, LastPass IIRC, that got breached.

When working for big companies, there are so many wrong processes and practices which provides the bare minimal and that is fine.

Support team cannot care to report the problems coz they don't wanna more work, my laptop always connect to a restricted network while in the office which kills internet access to everything, that in turn cause the laptop to take 20-30 to turn own while it tries to run AD policies.

The whole process is broken within the companies culture, keep it minimal, repetitive and that "should work, next"!