Authentication

Password policy without password expiration period

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

It was found that password policy does not have password expiration period. By not rotating passwords, you increase the chances of user hijacking.

  • Recommended Mitigation

    It is recommended to set password expiration period in the password policy.

Need help?

Get a free Security Risk Assessment. Start today

See Orca in action See Orca in action-> View a 10 minute recorded demo or sign up for a personalized one-on-one walk-through.