Does IA.L1-b.1.vi (Authentication) specify password complexity rules for CMMC Level 1?
Last updated: 6/5/2025
CMMC Level 1 (IA.L1-b.1.vi) requires authentication but doesn't prescribe specific password complexity rules like length or character types. However, using strong, unique passwords is a fundamental best practice implied by the need to effectively authenticate identities to protect FCI.