Best Practice Detail

13-8-8739

Service Providers should act swiftly when a password management system or other source of passwords has been compromised, to mitigate the weaknesses that allowed the compromise, restore the compromised system to a secure state, and require all users to change their passwords immediately. Procedures should be in place to notify all affected users that their passwords have been reset or need to be changed immediately.

Status: Rollover New

References/Comments: NIST SP800-118 Guide to Enterprise Password Management http://csrc.nist.gov/publications/drafts/800-118/draft-sp800-118.pdf

Historical events:

Service Providers
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Information Protection
Encryption
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII