2 ms·
It’s not necessarily management. When you run large IT systems, external auditors come into your systems and say : 1) no password rotation = bad 2) no passwo
by rvnx 3y ago
It’s not necessarily management.
When you run large IT systems, external auditors come into your systems and say :
1) no password rotation = bad
2) no password format enforcement = bad
Though it’s absurd to force people to have a password between 6 and 8 chars for example, because it limits the amount of possibilities.
- bongodongobob 3y agoNo, password rotation has not been standard best practice for quite some time now. Best practice is long passwords with no rotation. For humans. Service/admin accounts should be rotating constantly.
- rvnx 3y agoApparently EY or KPMG are not aware of that, yet they make the rules