+APP.1.2.A6 Password Management in Web Browsers (B)

APP.1.2.A6 Password Management in Web Browsers (B)

If a password manager is used in a web browser, it MUST create a direct and unique relationship between each webpage and the password stored for it. The stored passwords MUST be encrypted. It MUST be ensured that the passwords stored in the password manager can only be accessed after entering a master password. Furthermore, it MUST be ensured that the authentication for password-protected access is only valid only for the current session.

The IT Operation Department MUST ensure that web browsers allow users to delete stored passwords.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos

3. Regulaciones relacionadas

Regulaciones

Incidencias vinculadas

Vínculos
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information