💼 8.3.6 If passwords/passphrases are used as authentication factors to meet Requirement 8.3.1, they meet the minimum level of complexity.
- ID:
/frameworks/pci-dss-v4.0/08/03/06
Description
As follows:
- A minimum length of 12 characters (or IF the system does not support 12 characters, a minimum length of eight characters).
- Contain both numeric and alphabetic characters.
Similar
- Sections
/frameworks/pci-dss-v3.2.1/08/02/03
/frameworks/pci-dss-v4.0.1/08/03/06
- Internal
- ID:
dec-c-f5ec5cbf
- ID:
Similar Sections (Take Policies From)
Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
---|---|---|---|---|---|
💼 PCI DSS v3.2.1 → 💼 8.2.3 Passwords/passphrases must have complexity and strength. | 1 | 2 | no data | ||
💼 PCI DSS v4.0.1 → 💼 8.3.6 If passwords/passphrases are used as authentication factors to meet Requirement 8.3.1, they meet the minimum level of complexity. | 2 | no data |
Similar Sections (Give Policies To)
Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
---|---|---|---|---|---|
💼 PCI DSS v3.2.1 → 💼 8.2.3 Passwords/passphrases must have complexity and strength. | 1 | 2 | no data | ||
💼 PCI DSS v4.0.1 → 💼 8.3.6 If passwords/passphrases are used as authentication factors to meet Requirement 8.3.1, they meet the minimum level of complexity. | 2 | no data |
Sub Sections
Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
---|
Policies (2)
Policy | Logic Count | Flags | Compliance |
---|---|---|---|
🛡️ AWS Account IAM Password Policy minimum password length is 14 characters or less🟢 | 1 | 🟢 x6 | no data |
🛡️ AWS Account IAM Password Policy Number of passwords to remember is not set to 24🟢 | 1 | 🟢 x6 | no data |
Internal Rules
Rule | Policies | Flags |
---|---|---|
✉️ dec-x-f7c2faac | 1 |