Whatever. Take it up with NIST.
An unenlightened attitude. If people are calling the helpdesk often enough for it to be a genuine hassle, the process is the problem. IT is supposed to work for the company, not vice versa.
Forcing people to change their passwords every so often, for example, is not only considered poor security practice at this point, but is guaranteed to cause grief for IT when the user has to be reminded constantly to connect via VPN first. I have managed to desynchronize my Windows and company SSO passwords a couple of times myself, in the process of changing my password from StupidpasswordpolicyN to StupidpasswordpolicyN+1 every quarter.
Now there's a name I haven't heard for a LONG time, as a former Dell employee. He must have, what, a two-digit badge number?
Retire already, Jeff. The world has moved on.
Is there a reason they want to remove the choice?
Because (a) they're the government; (b) they have more guns than you; and (c) pick up that can.
Building translators is good clean fun. -- T. Cheatham