What problem can arise with a policy requiring users to change passwords at regular intervals?

What will be an ideal response?

Although the concept of regularly changing passwords sounds good on paper, it is a hard policy to maintain in the real world. For starters, users tend to forget passwords when they change a lot. This can lead to an even bigger security problem because users start writingpasswords down.