CSCv6|16.12

Title

Where multi-factor authentication is not supported, user accounts shall be required to use long passwords on the system (longer than 14 characters).

Description

Where multi-factor authentication is not supported, user accounts shall be required to use long passwords on the system (longer than 14 characters).

Reference Item Details

Category: Account Monitoring and Control

Family: Application

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.3.1 Ensure 'Minimum Password Complexity' is enabledPalo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
1.3.1 Ensure 'Minimum Password Complexity' is enabledPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.3.1 Ensure 'Minimum Password Complexity' is enabledPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.3.2 Ensure 'Minimum Length' is greater than or equal to 12Palo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
1.3.2 Ensure 'Minimum Length' is greater than or equal to 12Palo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.3.2 Ensure 'Minimum Length' is greater than or equal to 12Palo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
2.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMMobileIron - CIS Apple iOS 14 and iPadOS 14 v1.0.0 End User Owned L1
2.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMAirWatch - CIS Apple iOS 13 and iPadOS 13 v1.0.0 End User Owned L1
2.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMAirWatch - CIS Apple iOS 12 v1.0.0 End User Owned L1
2.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMAirWatch - CIS Apple iOS 11 v1.0.0 End User Owned L1
2.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMAirWatch - CIS Apple iOS 10 v2.0.0 End User Owned L1
2.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMMobileIron - CIS Apple iOS 11 v1.0.0 End User Owned L1
2.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMMobileIron - CIS Apple iOS 10 v2.0.0 End User Owned L1
2.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMAirWatch - CIS Apple iOS 14 and iPadOS 14 v1.0.0 End User Owned L1
2.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMMobileIron - CIS Apple iOS 12 v1.0.0 End User Owned L1
2.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMMobileIron - CIS Apple iOS 13 and iPadOS 13 v1.0.0 End User Owned L1
3.4 Ensure SQL Authentication is not used in contained databasesMS_SQLDBCIS SQL Server 2012 Database L1 DB v1.6.0
3.4 Ensure SQL Authentication is not used in contained databasesMS_SQLDBCIS SQL Server 2012 Database L1 AWS RDS v1.6.0
3.4 Ensure SQL Authentication is not used in contained databasesMS_SQLDBCIS SQL Server 2014 Database L1 AWS RDS v1.5.0
3.4 Ensure SQL Authentication is not used in contained databasesMS_SQLDBCIS SQL Server 2014 Database L1 DB v1.5.0
3.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMAirWatch - CIS Apple iOS 14 and iPadOS 14 Institution Owned L1
3.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMMobileIron - CIS Apple iOS 11 v1.0.0 Institution Owned L1
3.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMAirWatch - CIS Apple iOS 13 and iPadOS 13 Institution Owned L1
3.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMMobileIron - CIS Apple iOS 10 v2.0.0 Institution Owned L1
3.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMAirWatch - CIS Apple iOS 10 v2.0.0 Institution Owned L1
3.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMMobileIron - CIS Apple iOS 14 and iPadOS 14 Institution Owned L1
3.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMMobileIron - CIS Apple iOS 12 v1.0.0 Institution Owned L1
3.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMAirWatch - CIS Apple iOS 11 v1.0.0 Institution Owned L1
3.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMAirWatch - CIS Apple iOS 12 v1.0.0 Institution Owned L1
3.4.2 Ensure 'Minimum passcode length' is set to '6' or greaterMDMMobileIron - CIS Apple iOS 13 and iPadOS 13 Institution Owned L1
5.3.1 Ensure password creation requirements are configured - dcreditUnixCIS Amazon Linux v2.1.0 L1
5.3.1 Ensure password creation requirements are configured - dcreditUnixCIS Distribution Independent Linux Server L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - dcreditUnixCIS Debian 8 Server L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - dcreditUnixCIS Distribution Independent Linux Workstation L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - dcreditUnixCIS Debian 8 Workstation L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - lcreditUnixCIS Distribution Independent Linux Server L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - lcreditUnixCIS Debian 8 Server L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - lcreditUnixCIS Distribution Independent Linux Workstation L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - lcreditUnixCIS Debian 8 Workstation L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - minlenUnixCIS Amazon Linux v2.1.0 L1
5.3.1 Ensure password creation requirements are configured - minlenUnixCIS Debian 8 Workstation L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - minlenUnixCIS Distribution Independent Linux Server L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - minlenUnixCIS Debian 8 Server L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - minlenUnixCIS Distribution Independent Linux Workstation L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - ocreditUnixCIS Debian 8 Server L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - ocreditUnixCIS Distribution Independent Linux Server L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - ocreditUnixCIS Distribution Independent Linux Workstation L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - ocreditUnixCIS Debian 8 Workstation L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - password-auth lcreditUnixCIS Amazon Linux v2.1.0 L1
5.3.1 Ensure password creation requirements are configured - password-auth ocreditUnixCIS Amazon Linux v2.1.0 L1