6.1.9 Password Management

Certain user password related parameters should be defined at the organization level. These parameters will apply to all the users of the system. Examples of such parameters are the number of invalid login attempts after which a user-id should be disabled, the maximum and minimum length for a password, the interval at which the password should be changed by every user, etc.