New Zealand Information Security Manual (NZISM)
Chapter 16: Authentication and Access Controls – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 16.1.31.C.05: No predictable resets, cleartext storage or reused reset passwords

What does 16.1.31.C.05 require?

Agencies must not: permit reset passwords that can be predicted; keep passwords on the system in cleartext; or use the same password when resetting several accounts.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 16: Authentication and Access Controls – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls