Best Practice Detail

13-8-8763

Network Operators should act swiftly when a password management system or other source of passwords has been compromised, to mitigate the weaknesses that allowed the compromise, restore the compromised system to a secure state, and require all users to change their passwords immediately. Procedures should be in place to notify all affected users that their passwords have been reset or need to be changed immediately.

Status: Rollover New

References/Comments: "NIST SP800-118 Guide to Enterprise Password Management http://csrc.nist.gov/publications/drafts/800-118/draft-sp800-118.pdf"

Historical events:

Network Operators
Cable
Internet/Data
Satellite
Wireless
Wireline
Business Continuity
Cyber Security
Disaster Recovery
Emergency Preparedness
Network Operations
Encryption
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII