My IT Department knows all our passwords

Hi, was told to post here, hope that's ok.

The company I work for has a small IT team and they ask us all for passwords. If we change them, they ask us again for the updated password. This can't be right, can it?

We are ISO 2701 and 9001 acredited which must mean something when it comes to security? I don't want to talk to IT for fear of recriminations, what can I do? Among some of the documents …

ask can change cybersecurity department hope iso it team password passwords team the company work