6 ms·
No. You are free to reference nist and use a compensating control for that. No more pw changes :) Source: QSA
by downtown_ 8y ago
No. You are free to reference nist and use a compensating control for that. No more pw changes :) Source: QSA
- monocasa 8y agoI guess I was under the impression that compensating controls don't really let you question the efficacy of the point of the original requirement, but instead "we're meeting the requirement in this other way"?