CSCv6|5.7

Title

Where multi-factor authentication is not supported, user accounts shall be required to use long passwords on the system (longer than 14 characters).

Description

Where multi-factor authentication is not supported, user accounts shall be required to use long passwords on the system (longer than 14 characters).

Reference Item Details

Category: Controlled Use of Administrative Privileges

Family: System

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.1.4 Set 'Minimum password length' to '14 or more character(s)'WindowsCIS Windows 8 L1 v1.0.0
1.1.4 (L1) Ensure 'Minimum password length' is set to '14 or more character(s)'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
1.1.4 Ensure 'Minimum password length' is set to '14 or more character(s)'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
1.1.4 Ensure 'Minimum password length' is set to '14 or more character(s)'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
1.3.1 Ensure 'Minimum Password Complexity' is enabledPalo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
1.3.1 Ensure 'Minimum Password Complexity' is enabledPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.3.1 Ensure 'Minimum Password Complexity' is enabledPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.3.2 Ensure 'Minimum Length' is greater than or equal to 12Palo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
1.3.2 Ensure 'Minimum Length' is greater than or equal to 12Palo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.3.2 Ensure 'Minimum Length' is greater than or equal to 12Palo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
5.3.1 Ensure password creation requirements are configured - 'dcredit'UnixCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0
5.3.1 Ensure password creation requirements are configured - 'dcredit'UnixCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0
5.3.1 Ensure password creation requirements are configured - 'dcredit'UnixCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0
5.3.1 Ensure password creation requirements are configured - 'lcredit'UnixCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0
5.3.1 Ensure password creation requirements are configured - 'lcredit'UnixCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0
5.3.1 Ensure password creation requirements are configured - 'lcredit'UnixCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0
5.3.1 Ensure password creation requirements are configured - 'minlen'UnixCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0
5.3.1 Ensure password creation requirements are configured - 'minlen'UnixCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0
5.3.1 Ensure password creation requirements are configured - 'minlen'UnixCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0
5.3.1 Ensure password creation requirements are configured - 'ocredit'UnixCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0
5.3.1 Ensure password creation requirements are configured - 'ocredit'UnixCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0
5.3.1 Ensure password creation requirements are configured - 'ocredit'UnixCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0
5.3.1 Ensure password creation requirements are configured - 'ucredit'UnixCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0
5.3.1 Ensure password creation requirements are configured - 'ucredit'UnixCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0
5.3.1 Ensure password creation requirements are configured - 'ucredit'UnixCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0
5.3.1 Ensure password creation requirements are configured - dcreditUnixCIS Amazon Linux v2.1.0 L1
5.3.1 Ensure password creation requirements are configured - dcreditUnixCIS Distribution Independent Linux Server L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - dcreditUnixCIS Debian 8 Server L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - dcreditUnixCIS Debian 8 Workstation L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - dcreditUnixCIS Distribution Independent Linux Workstation L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - lcreditUnixCIS Distribution Independent Linux Server L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - lcreditUnixCIS Debian 8 Server L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - lcreditUnixCIS Debian 8 Workstation L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - lcreditUnixCIS Distribution Independent Linux Workstation L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - minlenUnixCIS Amazon Linux v2.1.0 L1
5.3.1 Ensure password creation requirements are configured - minlenUnixCIS Debian 8 Workstation L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - minlenUnixCIS Distribution Independent Linux Server L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - minlenUnixCIS Debian 8 Server L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - minlenUnixCIS Distribution Independent Linux Workstation L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - ocreditUnixCIS Debian 8 Server L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - ocreditUnixCIS Distribution Independent Linux Server L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - ocreditUnixCIS Debian 8 Workstation L1 v2.0.2
5.3.1 Ensure password creation requirements are configured - ocreditUnixCIS Distribution Independent Linux Workstation L1 v2.0.0
5.3.1 Ensure password creation requirements are configured - password-auth lcreditUnixCIS Amazon Linux v2.1.0 L1
18.2.4 (L1) Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
18.2.4 Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
18.2.4 Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
18.2.5 (L1) Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
18.2.5 Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
18.2.5 Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'WindowsCIS Windows 7 Workstation Level 1 v3.2.0