Nevada Gaming Control Board Cybersecurity Requirements MICS-IT-23: IT MICS #23 Other default accounts disabled unless needed, passwords changed every 90 days if kept

What does MICS-IT-23 require?

Default accounts other than administrator, service or guest accounts should be disabled unless needed for the system to work; any that stay enabled have their passwords changed at least every 90 days.