💼 2.1 Always change vendor-supplied defaults and remove or disable unnecessary default accounts before installing a system on the network.
-
Contextual name: 💼 2.1 Always change vendor-supplied defaults and remove or disable unnecessary default accounts before installing a system on the network.
-
ID:
/frameworks/pci-dss-v3.2.1/02/01 -
Located in: 💼 2 Do not use vendor-supplied defaults for system passwords and other security parameters.
Description
This applies to ALL default passwords, including but not limited to those used by operating systems, software that provides security services, application and system accounts, point-of-sale (POS) terminals, payment applications, Simple Network Management Protocol (SNMP) community strings, etc.).
Similar
- Sections
/frameworks/pci-dss-v4.0/02/02/02/frameworks/aws-fsbp-v1.0.0/ec2/02/frameworks/aws-fsbp-v1.0.0/iam/04
- Internal
- ID:
dec-c-7ace62ef
- ID:
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [EC2.2] VPC default security groups should not allow inbound or outbound traffic | 1 | |||
| 💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [IAM.4] IAM root user access key should not exist | 1 | 1 | ||
| 💼 PCI DSS v4.0 → 💼 2.2.2 Vendor default accounts are managed. | 8 |
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 PCI DSS v4.0 → 💼 2.2.2 Vendor default accounts are managed. | 8 |