Review the network device account management configuration and settings to determine whether password reuse for the organizationally defined number of generations is prohibited. If authentication functionality is provided by the underlying platform's account management system or by a network authentication server rather than the network device application itself, this is not a finding. Network Device Management Security Requirements Guideĭetails Check Text ( C-SRG-NET-0001511_chk ) This control applies to passwords configured or controlled by the network device itself. A password must have an expiration date to limit the amount of time a compromised password can be used by a malicious user. To ensure only the assigned individual is using the account, the account holder must create a strong password that is privately maintained and changed based on the organizationally defined frequency. Authorization for access to any network device requires an approved and assigned individual account identifier.
0 Comments
Leave a Reply. |