What are the standards that people always tell you to comply but actually different in reality?

Maybe something about security, or coding guidelines, or workplace dynamics.