IAM-13—Password Authentication
>Control Description
User and device authentication to privileged information systems is protected by passwords that meet Organization's password complexity requirements.
Theme
Technology
Type
Preventive
Policy/Standard
Access Management Procedure>Implementation Guidance
1. Ensure that user and device authentication to privileged information systems is protected by passwords that meet Organization's password complexity requirements.
>Testing Procedure
1. Inspect Organization's Authentication Standard to determine whether the policies contain requirements for the creation, allocation, change, distribution, and safeguarding of passwords. 2. Inspect the accessmanagement tool setting to determine password complexity, consecutive re-use, and change frequency requirements of passwords is in accordance with organization password complexity requirements.
>Audit Artifacts
E-IAM-16
E-IAM-18
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.