Control: ism-0418; Revision: 6; Updated: Dec-22; Applicability: ALL; Essential Eight: N/A ​

Credentials are kept separate from systems they are used to authenticate to, except for when performing authentication activities.