Control: ism-1560; Revision: 2; Updated: Mar-22; Applicability: S; Essential Eight: N/A ​

Memorised secrets used for multi-factor authentication on SECRET systems are a minimum of 8 characters.