16.5: Encrypt Transmittal of Username and Authentication Credentials

CSF v1.1 References:

PR.DS-2

PF v1.0 References:

PR.DS-P2

Threats Addressed:

Information Disclosure

Group:

The next version of the control set incorporates all or part of this control into: 3.10: Encrypt Sensitive Data in Transit.

Control Statement

Ensure that all account usernames and authentication credentials are transmitted across networks using encrypted channels.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]