We used to have this really awesome techy guy and he'd give a really long prep talk about IT security when you were first hired... so maybe he contributed to the password criteria. These days the new ones tell me they don't get such talks anymore but we still get some almost paranoid emails from the IT guys from time to time :D