This practice is not recommended anymore, yet still found in many enterprises.
really? what's the standard for that? like how often should you be rotating your password?
I assumed many people forget their new passwords (because I often do) and become compromised than are protected by continually rotating passwords.