Topic

Protecting credentials

Applicable to

all

History

Sep 2023

Networks are scanned at least monthly to identify any credentials that are being stored in the clear.

A new control was added covering at least monthly scanning of networks to identify any credentials that are being stored in an unprotected manner on networks, such as passwords and API keys being kept in the clear in documents, on network file shares or in other data repositories.