overkill - password

Computer access at any establishment for employee is almost always password protected. I understand the need for this. But sometimes the requirements for an acceptable password is overkill. My work for example requires that password has to be at least 7 letters with Upper and lower case combination plus numbers in it. And you can not repeat the last 5 passwords you have done. The password has to be changed every 6 months. So in essence they want us to create and remember a new complicated password twice a year. I say this is overkill. This is not a million dollar account or the CIA that needs protecting, it is just work. Nobody with computer outside of the hospital will be able to use my password should it be stolen. This password works only for work computers. The threat of unauthorize access is disproportionate to the password requirement.