Control: ism-1558; Revision: 2; Updated: Mar-22; Applicability: ALL; Essential Eight: N/A ​

Passphrases used for single-factor authentication are not a list of categorised words; do not form a real sentence in a natural language; and are not constructed from song lyrics, movies, literature or any other publicly available material.