CMMC 1.0 Practice IA.2.078 Requirement:
Enforce a minimum password complexity and change of characters when new passwords are created.
CMMC 1.0 IA.2.078 Requirement Explanation:
By establishing and enforcing strong password requirements you make it more difficult for an attacker to crack your passwords.
Example CMMC 1.0 IA.2.078 Implementation:
Establish your password complexity requirements. For example an 8-character mix of upper case letters, lower case letters, numbers, and special characters, including at least one of each. Using the password history policy you establish for IA.2.079 you can force users to always use new characters when they set a new password.
CMMC 1.0 IA.2.078 Scenario(s):
- Scenario 1:
An user is having difficulty setting a new password. You go to assist him and discover that he is only using lowercase letters and numbers. You inform him of your password complexity requirements. The user successfully creates a password meeting your complexity requirements.
Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:
Compliance Accelerator
Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.
Quantum Assessor
Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.
Supply Chain Verifier
Trust is everything. Verify, monitor, and support subcontactor compliance.