Back

Configure the system's password field with a unique default password.


CONTROL ID
13825
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure initial system hardening according to the secure configuration baseline., CC ID: 13824

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • The preprogrammed password is unique to each device manufactured. (1798.91.04 (b)(1), California Civil Code Division 3 Part 4 Title 1.81.26 Security of Connected Devices)
  • assignment, to each individual with computer and Internet access to data compiled or maintained by such company, of passwords that are not vendor-assigned default passwords and that require resetting not less than every six months and of unique user identifications, that are designed to maintain the… (ยง 38a-999b(b)(2)(B)(ii), Connecticut General Statutes Title 38a, Chapter 705, Section 38a - 999b, Comprehensive information security program to safeguard personal information. Certification. Notice requirements for actual or suspected breach. Penalty.)