2 ms·
Alas, in Australia one of the more popular frameworks in gov agencies is Essential Eight, and they are a few years away from publishing an update with this radi
by Jedd 2y ago
Alas, in Australia one of the more popular frameworks in gov agencies is Essential Eight, and they are a few years away from publishing an update with this radical idea.
- NoPicklez 2y agoMy understanding is that Essential Eight doesn't require password rotation
- Jedd 2y agoIf so then I'll be doubly frustrated - I've been assured by our domain experts that this is a requirement of the model. Did it used to be and was since retracted? I suppose it may be a local or state-based 'implementation augmentation'. I've trawled just now through the signals directorate site and can find plenty of references to passwords, but nothing specifically covering this.
- NoPicklez 2y agoIt may have been as password rotation was a requirement thrown around, but to my knowledge it's not come up in assessments for a long time.