IA.L2-3.5.8  

Reference: CMMC 2.0

Family: IA

Level Introduced: 2

Title: Password Reuse

Practice:
Prohibit password reuse for a specified number of generations.

CMMC Clarification:
Individuals may not reuse passwords for a defined period of time and a set number of passwords generated.

Example
You are in charge of setting your organization's password rules. You define how often individuals can reuse their passwords and the minimum number of password generations before reuse. Using new passwords helps provide increased network security.

Source: CMMC v2.0