NERC CIP
CIP-007: System Security Management – NERC CIP

NERC CIP CIP-007 R5.5: CIP-007-6 R5.5: Password length and complexity for password-only authentication

What does CIP-007 R5.5 require?

For password-only authentication of interactive user access, technically or procedurally enforce a length of at least the lesser of eight characters or the device maximum, and complexity of the lesser of three or more character types or the device maximum.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in CIP-007: System Security Management – NERC CIP

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NERC CIP controls