Almost as ~~bad~~ glorious as Breezewood, PA.
Yep, that's dumb. SOC2 is built upon NIST guidance, not the other way around.
If you have any voice with your Security department, you can tell them that rotating passwords are counter to NIST SP 800-63B (Section 10.2.1) guidance:
Do not require that memorized secrets be changed arbitrarily (e.g., periodically) unless there is a user request or evidence of authenticator compromise.
This also works flawlessly on Steam Deck which is really fucking cool.
I lied, the "monitor mode" is still tracking the headset position, so you should restart the game, but it's okay for small things like menuing or whatever
The way SteamVR handles it, yeah—you're already in desktop mode all the time while also streaming VR to the headset.
I spent weeks laser and core mining in a cheap Quest 2 headset. Shame those activities don't pay well, but it was 1000x more enjoyable for me.
Everything else is slightly better too, with the unfortunate exception of on-foot content which throws you out of VR and into a virtualized monitor mode.
I didn't order waffle fries!
(I usually see the Computer Fraud and Abuse Act abbreviated CFAA)