Control: ism-1402; Revision: 6; Updated: Mar-22; Applicability: ALL; Essential Eight: N/A ​

Credentials stored on systems are protected by a password manager; a hardware security module; or by salting, hashing and stretching them before storage within a database.