Control: ism-1590; Revision: 2; Updated: Jun-23; Applicability: ALL; Essential Eight: N/A ​

Credentials are changed if:

• they are compromised
• they are suspected of being compromised
• they are discovered stored on networks in the clear
• they are discovered being transferred across networks in the clear
• membership of a shared account changes
• they have not been changed in the past 12 months.