not to choose common passwords this could be implemented by technical means, — using a password blacklist not to use the same password anywhere else, at work or at home where and how they may record passwords to store and retrieve them securely — for example, in a sealed envelope in a secure cupboard if they may use password management software if so, which software and how — which passwords they really must memorise and not record anywhere The Applicant is not required to: enforce regular password expiry for any account enforce password complexity requirements Clause Requirement Evidence/Narrative/Compensating control 2.1 If applicable describe the technical Answer not required controls used to enforce the password policy. If applicable describe paper based 2.2 Answer not required controls used to enforce the password policy. 2.3 Confirm that you have implemented a Answer not required password policy which meets the requirements of the Password-based authentication requirements (above) Firewalls Objective Ensure that only safe and necessary network services can be accessed from the Internet. Clause Requirement Evidence/Narrative/Compensating control 3.1 Describe how your firewalls are placed in your network 3.2 Tick all that apply Office Environment All desktop/laptops have a properly configured firewall Some desktop/laptops have a properly configured host-based firewall No desktop/laptops have a properly configured firewall
not to choose common passwords — this could be implemented by technical means, using a password blacklist not to use the same password anywhere else, at work or at home where and how they may record passwords to store and retrieve them securely — for example, in a sealed envelope in a secure cupboard if they may use password management software — if so, which software and how which passwords they really must memorise and not record anywhere The Applicant is not required to: enforce regular password expiry for any account enforce password complexity requirements Clause Requirement Evidence/Narrative/Compensating control 2.1 If applicable describe the technical controls used to enforce the password policy. Answer not required 2.2 If applicable describe paper based controls used to enforce the password policy. Answer not required 2.3 Confirm that you have implemented a password policy which meets the requirements of the Password-based authentication requirements (above) Answer not required Firewalls Objective Ensure that only safe and necessary network services can be accessed from the Internet. Clause Requirement Evidence/Narrative/Compensating control 3.1 Describe how your firewalls are placed in your network 3.2 Tick all that apply Office Environment All desktop/laptops have a properly configured firewall Some desktop/laptops have a properly configured host-based firewall No desktop/laptops have a properly configured firewall
CfA-Cyber-Essentials-Questionnaire-A-v1.050-July-2017-questions.docx