No, eight characters, some capital letters and numbers is not a good password policy

Western Oz infosec audit report was shocking, but only 'cos it made public

Internal cybersecurity audits rarely make it to the public domain, but when they do it's often an eye-popping read."