Control Category: Identification and Authentication

Create a unique, non-privileged, account for each user. Assign a different password for user and administrative accounts.

Use strong passwords. Change authentication keys e.g., password, certificate, regularly – at least annually.

Do not reuse passwords for multiple services. Do not use your Kerberos password for non-Kerberos enabled systems.

Change passwords immediately if a compromise is suspected.

Change default or vendor-supplied passwords and remove default accounts.