IA.L2-3.5.9  

Reference: CMMC 2.11

Family: IA

Level Introduced: 2

Title: Temporary Passwords

Practice:
Allow temporary password use for system logons with an immediate change to a permanent password.

CMMC Clarification:
Users must change their temporary passwords the first time they log in. Temporary passwords usually follow a consistent style within an organization and can be more easily guessed than passwords created by the unique user.

Example
You are in charge of setting temporary passwords for your users. Users must change their temporary passwords to a permanent password the first time they log in.

Source: CMMC v2.0