CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
Account Security

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 CPG-1.B: Minimum Password Strength

Enforce a minimum password length of 15 characters or use phrase-based passwords for all human user accounts.

Other controls in Account Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.