When my company did this, I started using passwords like monthname+year just to spite the ciso. Nobody is going to remember A complex new password every 2 months. And with all the many different locations the password was used, a password manager was not a useful option.