This came up recently (https://www.techrepublic.com.com/5208-6230-0.html?forumID=102&threadID=331897&messageID=3306625&tag=content;leftCol), and left me unconvinced.
What is the point in forcing regular password changes?
Reasons, rationale, justifications… what are they?