cisco certification renewal policy

cisco certification renewal policy.Password creationThe development of a standard that defines the requirements for secure passwords is an extremely important part of password management. This standard applies to the entire unit and all its systems.This standard applies to the entire unit and all of its systems. When developing policies, processes and standards related to passwords, units should consider the following requirements. Password strength: It is necessary to establish a system that specifies password strength to reduce the risk posed by users setting weak passwords (e.g., passwords that can be easily brute-cracked). Regulating the complexity and length of passwords will help increase the strength of passwords. In general, regulating the complexity of passwords means allowing users to use a combination of characters, numbers, and symbols as passwords. The longer the password, the harder it is to crack; the shorter the password, the higher the risk. The strength and Bing (entropy) of a password are the two main factors that measure the quality of a password. For more information on passwords and how to use them in electronic authentication systems, see NISTSP 800-63 oPassword duration: The duration of a password (more appropriately, the maximum duration of a password) is an important attribute of a password. Changing passwords periodically should be considered a best practice. The longer a password is used, the higher the risk of compromise. Password management systems should specify the maximum duration of password use. While changing passwords frequently improves security, it adds additional administrative costs to the user and the system. Reuse of passwords: Reusing the same password or password wording over and over again also increases the risk of password compromise. It is common practice to change only the last digit of a password, or to reuse two passwords and replace them when they expire. Systems related to the reuse of passwords should provide that the same password cannot be reused for a specified period of time. The system relating to the creation of passwords should also specify whether the password is to be assigned by a human or generated automatically by the system. There is also ahybrid password generation method, by combining human-assigned password terms with system-generated password terms. Table 5.2summarizes the advantages and disadvantages of the various password generation methods.Table 5-2 Comparison of various password generation methodsMethod Description Advantages DisadvantagesHuman-assigned password User-assigned password Easy to remember Usually generates an easy-to-guess password. Users may set the same password for multiple systemsSystem-generated passwords Passwords are automatically generated by the system Passwords are strong and conform to the security system Difficult to remember, but users tend to write passwords on something, thus defeating the original purpose of hard-to-remember passwords5.2 Introduction to Identity and Access Management 235