5.2—Use Unique Passwords

IG1

IG2

IG3

Users

Protect

>Control Description

Use unique passwords for all enterprise assets. Best practice implementation includes, at a minimum, an 8-character password for accounts using Multi-Factor Authentication (MFA) and a 14-character password for accounts not using MFA.

>Cross-Framework Mappings

SCF

>Relevant Technologies

Technology-specific guidance with authoritative sources and verification commands.

Okta Google Workspace Microsoft Entra ID Auth0 Duo Security

Ask AI

Configure your API key to use AI features.