US Maritime Transportation Security Act (MTSA) and USCG Cybersecurity Requirements C-650A: Secure accounts: lockout, no default passwords, strong passwords, MFA, least privilege, separate and revoked credentials

What does C-650A require?

Enable lockout after repeated failed logins, change default passwords (or document compensating controls), enforce password strength, use multifactor authentication on password-protected IT and remotely accessible OT (or compensating controls), apply least privilege to privileged accounts, keep separate credentials on critical systems and revoke credentials when users leave.