💼 2.1 Always change vendor-supplied defaults and remove or disable unnecessary default accounts before installing a system on the network.

• Contextual name: 💼 2.1 Always change vendor-supplied defaults and remove or disable unnecessary default accounts before installing a system on the network.

• ID: /frameworks/pci-dss-v3.2.1/02/01

• Located in: 💼 2 Do not use vendor-supplied defaults for system passwords and other security parameters.

Description

This applies to ALL default passwords, including but not limited to those used by operating systems, software that provides security services, application and system accounts, point-of-sale (POS) terminals, payment applications, Simple Network Management Protocol (SNMP) community strings, etc.).

Similar

• Sections
  • /frameworks/pci-dss-v4.0/02/02/02
  • /frameworks/aws-fsbp-v1.0.0/ec2/02
  • /frameworks/aws-fsbp-v1.0.0/iam/04
• Internal
  • ID: dec-c-7ace62ef

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [EC2.2] VPC default security groups should not allow inbound or outbound traffic			1
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [IAM.4] IAM root user access key should not exist		1	1
💼 PCI DSS v4.0 → 💼 2.2.2 Vendor default accounts are managed.			2

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 PCI DSS v4.0 → 💼 2.2.2 Vendor default accounts are managed.			2

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags
💼 2.1.1 For wireless environments connected to the cardholder data environment or transmitting cardholder data, change ALL wireless vendor defaults at installation, including but not limited to default wireless encryption keys, passwords, and SNMP community strings.

Policies (2)

Policy	Logic Count	Flags
📝 AWS Account Root User has active access keys 🟢	1	🟢 x6
📝 AWS EC2 Default Security Group does not restrict all traffic 🟢	1	🟢 x6