The functions performed by the person or processes responsible for security of passwords on a given system.
7
votes
2answers
351 views
How can IA-5(1)(b) be enforced on Windows systems?
Note: I've also posted a question for this issue on non-Windows systems.
In NIST SP 800-53 Rev. 3, IA-5 is the control addressing "Authenticator Management". The requirements in this control include ...
8
votes
6answers
330 views
How can I ensure that default passwords are no longer in use?
There are two situations in which 'default' passwords get used on a network:
A new user is registered. In her registration pack, along with her new username, e-mail address and so on is her initial ...
3
votes
1answer
112 views
Protect file in a web site
How would you protect a password file in a web site? Is hashing the individual passwords not enough? What other steps do I need to follow?
