A "Change your password every month" policy is a good sign your IT department is full of olds who haven't been paying attention since 1998.