https://thepracticalparanoid.com/q-what-are-the-current-industry-standards-for-it-password-policies/