800-53|IA-5(4)

Title

AUTOMATED SUPPORT FOR PASSWORD STRENGTH DETERMINATION

Description

The organization employs automated tools to determine if password authenticators are sufficiently strong to satisfy [Assignment: organization-defined requirements].

Supplemental

This control enhancement focuses on the creation of strong passwords and the characteristics of such passwords (e.g., complexity) prior to use, the enforcement of which is carried out by organizational information systems in IA-5(1).

Reference Item Details

Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations

Related: CA-2,CA-7,RA-5

Category: IDENTIFICATION AND AUTHENTICATION

Parent Title: AUTHENTICATOR MANAGEMENT

Family: IDENTIFICATION AND AUTHENTICATION

Audit Items

View all Reference Audit Items

Name	Plugin	Audit Name
GEN000790 - The system must prevent the use of dictionary words for passwords.	Unix	DISA STIG AIX 6.1 v1r14
GEN000790 - The system must prevent the use of dictionary words for passwords.	Unix	DISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN000790 - The system must prevent the use of dictionary words for passwords.	Unix	DISA STIG for Oracle Linux 5 v2r1
GEN000790 - The system must prevent the use of dictionary words for passwords.	Unix	DISA STIG AIX 5.3 v1r2

Detections

Analytics