Access control

What is your password policy?

How to answer this security questionnaire question, with an expert response your security or GRC team can adapt.

Expert answer

Enforce a password policy aligned with NIST guidance: sufficient length, screening against breached-password lists, no forced periodic rotation without cause, and MFA on top. Store passwords using a strong, salted hashing algorithm such as bcrypt or Argon2.

Answer every security questionnaire in minutes

Wolfia drafts accurate, cited answers to security questionnaires and RFPs from your existing documentation. See it work on your own questions.Book a demo