3 ms·

My understanding is that Essential Eight doesn't require password rotation

• Jedd 2y ago
  If so then I'll be doubly frustrated - I've been assured by our domain experts that this is a requirement of the model. Did it used to be and was since retracted? I suppose it may be a local or state-based 'implementation augmentation'. I've trawled just now through the signals directorate site and can find plenty of references to passwords, but nothing specifically covering this.
  • NoPicklez 2y ago
    It may have been as password rotation was a requirement thrown around, but to my knowledge it's not come up in assessments for a long time.