CCI-004061

For password-based authentication, verify when users create or update passwords, that the passwords are not found on the list of commonly-used, expected, or compromised passwords in IA-5 (1) (a).

Implementation Guidance

Validation Procedures

Compelling Evidence

The controls below (if any) were marked by NIST as being related to CCI-004061.