IAC-18
User Responsibilities for Account Management
Description
Mechanisms exist to compel users to follow accepted practices in the use of authentication mechanisms (e.g., passwords, passphrases, physical or logical security tokens, smart cards, certificates, etc.).
Control Question
Does the organization compel users to follow accepted practices in the use of authentication mechanisms (e.g., passwords, passphrases, physical or logical security tokens, smart cards, certificates, etc.)?
Control Metadata
Domain:
Identification & Authentication
Validation Cadence:
Annual