CCI-004290

Include in the rules of behavior, restrictions on use of organization-provided identifiers (e.g., email addresses) and authentication secrets (e.g., passwords) for creating accounts on external sites/applications.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-004290.