NIST SP 800-171 & CMMC 2.0 Control 3.5.7 Requirement:
Enforce a minimum password complexity and change of characters when new passwords are created.
NIST SP 800-171 & CMMC 2.0 3.5.7 Requirement Explanation:
By establishing and enforcing strong password requirements you make it more difficult for an attacker to perform password attacks.
Example NIST SP 800-171 & CMMC 2.0 3.5.7 Implementation:
Establish your password complexity requirements. For example a 12-character mix of upper case letters, lower case letters, numbers, and special characters, including at least one of each. Using the password history policy you establish for IA.2.079 you can force users to always use new characters when they set a new password. You can enforce your password policy requirements on Windows systems using group policy or Windows EndPoint Manager.
NIST SP 800-171 & CMMC 2.0 3.5.7 Scenario(s):
- Scenario 1:
An user is having difficulty setting a new password. You go to assist him and discover that he is only using lowercase letters and numbers. You inform him of your password complexity requirements. The user successfully creates a password meeting your complexity requirements.
Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:
Compliance Accelerator
Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.
Quantum Assessor
Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.
Supply Chain Verifier
Trust is everything. Verify, monitor, and support subcontactor compliance.