CMMC 1.0 Practice IA.2.078 Requirement:
Enforce a minimum password complexity and change of characters when new passwords are created.
CMMC 1.0 IA.2.078 Requirement Explanation:
By establishing and enforcing strong password requirements you make it more difficult for an attacker to crack your passwords.
Example CMMC 1.0 IA.2.078 Implementation:
Establish your password complexity requirements. For example an 8-character mix of upper case letters, lower case letters, numbers, and special characters, including at least one of each. Using the password history policy you establish for IA.2.079 you can force users to always use new characters when they set a new password.
CMMC 1.0 IA.2.078 Scenario(s):
- Scenario 1:
An user is having difficulty setting a new password. You go to assist him and discover that he is only using lowercase letters and numbers. You inform him of your password complexity requirements. The user successfully creates a password meeting your complexity requirements.
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.