As the companies grow they try to build a fence rather than educate people. Many a times asking people to setup a complex password is problematic. While you can enforce it on a company wide system, people will still revert back to default/easy passwords on internal systems. There are frequently cases of Active Directory passwords being very demanding but the internal DB passwords being abc123.