💼 8.3.6 If passwords/passphrases are used as authentication factors to meet Requirement 8.3.1, they meet the minimum level of complexity.

• ID: /frameworks/pci-dss-v4.0/08/03/06

Stats

not available

Description

As follows:

• A minimum length of 12 characters (or IF the system does not support 12 characters, a minimum length of eight characters).
• Contain both numeric and alphabetic characters.

Similar

• Sections
  • /frameworks/pci-dss-v3.2.1/08/02/03
  • /frameworks/pci-dss-v4.0.1/08/03/06
• Internal
  • ID: dec-c-f5ec5cbf

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 PCI DSS v3.2.1 → 💼 8.2.3 Passwords/passphrases must have complexity and strength.		1	4		no data
💼 PCI DSS v4.0.1 → 💼 8.3.6 If passwords/passphrases are used as authentication factors to meet Requirement 8.3.1, they meet the minimum level of complexity.			4		no data

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 PCI DSS v3.2.1 → 💼 8.2.3 Passwords/passphrases must have complexity and strength.		1	4		no data
💼 PCI DSS v4.0.1 → 💼 8.3.6 If passwords/passphrases are used as authentication factors to meet Requirement 8.3.1, they meet the minimum level of complexity.			4		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policies (4)

Policy	Logic Count	Flags	Compliance
🛡️ AWS Account does not have an IAM Password Policy🟢	1	🟢 x6	no data
🛡️ AWS Account IAM Password Policy minimum password length is 14 characters or less🟢	1	🟢 x6	no data
🛡️ AWS Account IAM Password Policy Number of passwords to remember is not set to 24🟢	1	🟢 x6	no data
🛡️ Oracle IAM Domain Password Policy has weak complexity requirements🟢	1	🟢 x6	no data

Internal Rules

Rule	Policies	Flags
✉️ dec-x-2e229fb4	1
✉️ dec-x-f7c2faac	1