Australian Information Security Manual ISM-1590: Credentials for user accounts are changed if: - they are compromised - they are suspected

Credentials for user accounts are changed if: - they are compromised - they are suspected of being compromised - they are discovered stored on networks in the clear - they are discovered being transferred across networks in the clear - membership of a shared user account changes.