Detections
Analytics

1.5 WN16-00-000060

Information

Manually managed application account passwords must be at least 14 characters in length.

GROUP ID:V-224823
RULE ID:SV-224823r1016376

Application/service account passwords must be of sufficient length to prevent being easily cracked. Application/service accounts that are manually managed must have passwords at least 14 characters in length.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Establish a policy that requires application/service account passwords that are manually managed to be at least 14 characters in length. Ensure the policy is enforced.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|II, CCI|CCI-000205, Rule-ID|SV-224823r1016376_rule, STIG-ID|WN16-00-000060

Plugin: Windows

Control ID: d943c5af09b21a87d21c5fc01456843240c3d6439f9048964dc7d2f54907c97a