CCI-001615

The organization defines the minimum number of characters that are changed when new passwords are created.

Implementation Guidance

DoD has defined the minimum number of characters as 50% of the minimum password length.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the minimum number of characters as 50% of the minimum password length.

Compelling Evidence

Automatically Compliant

The controls below (if any) were marked by NIST as being related to CCI-001615.