3 ms·
> But anyone who has been in security for more than 1 month knows that regular password rotation has not been a recommendation for over 5 years. So optimistic
by staticassertion 5y ago
> But anyone who has been in security for more than 1 month knows that regular password rotation has not been a recommendation for over 5 years.
So optimistic. We just got dinged on this for SOC2 and I had to send over the so800-83b document that states as much.
- sk5t 5y agoSOC2 = infosec advice from junior accountants
- staticassertion 5y agoI still think it's overly optimistic to say "everyone in infosec knows this". Most people in infosec don't know anything.