Good passwords and security priorities

From: sinister (sinister_at_nospam.invalid)
Date: 04/24/05 

Date: Sun, 24 Apr 2005 21:03:40 GMT

I have the impression that in many situations, simple but critical security
protection measures are overlooked, even though complicated but less vital
measures are implemented.

Isn't it true that a policy enforcing good passwords is critical, and a set
of security policies that overlooks that is flawed?

TIA,

S