NIST SP 800-171 & CMMC 2.0 3.5.7 Requirement:
Enforce a minimum password complexity and change of characters when new passwords are created.
NIST SP 800-171 & CMMC 2.0 3.5.7 Requirement Explanation:
By establishing and enforcing strong password requirements you make it more difficult for an attacker to perform password attacks.
Example NIST SP 800-171 & CMMC 2.0 3.5.7 Implementation:
Establish your password complexity requirements. For example a 12-character mix of upper case letters, lower case letters, numbers, and special characters, including at least one of each. Using the password history policy you establish for IA.2.079 you can force users to always use new characters when they set a new password. You can enforce your password policy requirements on Windows systems using group policy or Windows EndPoint Manager.
NIST SP 800-171 & CMMC 2.0 3.5.7 Scenario(s):
- Scenario 1:
An user is having difficulty setting a new password. You go to assist him and discover that he is only using lowercase letters and numbers. You inform him of your password complexity requirements. The user successfully creates a password meeting your complexity requirements.
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.