ACF2 PSWD GSO record value must be set to require a 60-day maximum password lifetime restriction.
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-223506
ACF2-ES-000890
SV-223506r1038967_rule
Medium
Description
Any password, no matter how complex, can eventually be cracked. Therefore, passwords need to be changed periodically. If the operating system does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the operating system passwords could be compromised.