text: 3. So now you know, how to create a good password policy. But how do you convince your management, that you actually need it? The main argument is ensuring data security integrity and confidentiality of your business information in order to prevent critical data losses, scandals, financial recompenses or other undesirable consequences. Meeting requirements of compliance standards (PCI, HIPAA, SOX, etc) is yet another rationale.