that did not technically or known default procedurally enforce one passwords. (5.4) of the two password OR parameters as described in 5.5.1 and 5.5.2. (5.5) The Responsible Entity has implemented one OR or more documented The Responsible Entity process(es) for has implemented one or password-only more documented authentication for process(es) for interactive user access only authentication for but the Responsible interactive user access but Entity did not did not technically or technically or procedurally enforce procedurally enforce all password changes or an of the password obligation to change the parameters described in password within 17 5.5.1 and 5.5.2. (5.5) calendar months but less OR than or equal to 18 calendar months of the The Responsible Entity last password change. has implemented one (5.6) or more documented process(es) for password-only authentication for interactive user access but did not technically or procedurally enforce password changes or an obligation to change the password within 18 calendar months of the last password change. (5.6) OR The Responsible Entity has implemented one
that did not technically or procedurally enforce one of the two password parameters as described in 5.5.1 and 5.5.2. (5.5) OR The Responsible Entity has implemented one or more documented process(es) for authentication for interactive user access but did not technically or procedurally enforce password changes or an obligation to change the password within 17 calendar months but less than or equal to 18 calendar months of the last password change. (5.6) known default passwords. (5.4) OR The Responsible Entity has implemented one or more documented process(es) for password-only authentication for interactive user access but the Responsible Entity did not technically or procedurally enforce all of the password parameters described in 5.5.1 and 5.5.2. (5.5) OR The Responsible Entity has implemented one or more documented process(es) for password-only authentication for interactive user access but did not technically or procedurally enforce password changes or an obligation to change the password within 18 calendar months of the last password change. (5.6) OR The Responsible Entity has implemented one only
VSL_Matrix_Complete_2016_01_27.docx