Cyber Essentials Plus
User Access Control
Cyber Essentials Plus CEP-UA-03: Password Policy and Brute Force Protection
Authentication must be protected against brute force, including minimum password length, password deny lists or use of MFA and lockout or throttling.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated Other controls in User Access Control
Query this from an agent
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.