IA.L2-3.5.9 Temporary Passwords

Allow temporary password use for system logons with an immediate change to a permanent password.

Source: NIST SP 800-171 Rev 2 3.5.9

Discussion: Changing temporary passwords to permanent passwords immediately after system logon ensures that the necessary strength of the authentication mechanism is implemented at the earliest opportunity, reducing the susceptibility to authenticator compromises.

SPRS Score: 1