I has been over 2 months since I informed you that your password requirement is making our QuickBooks installation less secure.

My IS department informs me the password removal change should take about 1 month to implement, test, package, and deploy.  So, why is it not done?

If you are serious about protecting the security of our financial data, you would not force customers to implement a solution that results in less security.

Please respond with a time frame of when I can expect this issue to be fixed.

If required by law to implement security as you have done [and you've implied this], please post a link to the relevant federal legal code.

The time for canned responses and evasive answers has passed.  Let's make your customers happy.