Standard
Authentication and Password Management Standard
To establish consistent, risk-proportionate authentication controls that reduce the risk of credential theft, brute force, and account takeover.
- Type
- Standard
- Version
- 1.1.22
- Date
- 2026-10-27
- Owner
- Chief Information Security Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon material threat, framework, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Governance and accountability
- 4. Password requirements
- 5. Multi-factor authentication (MFA)
- 6. Session management
- 7. Service account authentication
- 8. Exceptions
- 9. Framework alignment
Frameworks it maps to
Related documents
Next
All Documents