+SYS.2.2.3.A17 No Storage of Automatic Login Data (S)

SYS.2.2.3.A17 No Storage of Automatic Login Data (S)

Storing passwords, certificates, and other information for automatic logins to websites and IT systems SHOULD NOT be allowed.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems