I had to push back at my company after getting acquired multiple times that no, I am not implementing your much worse password policies that NIST has argued against for years.

All because some 15 year old security document said that's what all their products adhere to.