Control: ism-1557; Revision: 2; Updated: Dec-21; Applicability: S; Essential Eight: N/A ​

Passphrases used for single-factor authentication on SECRET systems are at least 5 random words with a total minimum length of 17 characters.