CFM-11—Default Device Passwords
>Control Description
Vendor-supplied default passwords are changed according to Organization standards prior to device installation on the Organization network or immediately after software or operating system installation.
Theme
Technology
Type
Preventive
Policy/Standard
Infrastructure Management Policy>Implementation Guidance
1. Ensure that the security hardening and configuration baseline checks include enforcing disablement of default accounts. 2. Ensure that the security hardening and configuration baseline deviations are being tracked to resolution
>Testing Procedure
1. Inspect security hardening and configuration baseline checks to determine whether they are configured to enforce disabling of default accounts. 2. Validate that the security hardening and configuration baseline deviations are being tracked to resolution.
>Audit Artifacts
E-CFM-02
E-CFM-05
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.