Topic

Default accounts and credentials for network devices

Applicable to

all

History

Priority

must

Dec 2022

Default accounts or credentials for network devices including for any pre-configured accounts, are changed.

Language from an existing control relating to default accounts and credentials for network devices was amended to mirror similar language for controls relating to operating systems and applications.

Mar 2022

Default accounts for network devices are disabled, renamed or have their credentials changed.

Miscellaneous changes were made to rationale and recommendations throughout the publication to clarify content without changing intent. This included a review from the Guidelines for System Hardening chapter through to the Guidelines for Data Transfers chapter.

2015

Default network device accounts must be disabled, renamed or have their passphrasechanged.