NIST proposes barring some of the most nonsensical password rules
NIST proposes barring some of the most nonsensical password rules
the document is nearly impossible to read all the way through and just as hard to understand fully
It is a boring document but it not impossible to read through, nor understand. The is what compliances officer need to read through and understand. I have a (useless) cybersecurity degree and reading NIST publications is part of my lecture.
My career as a sysadmin consistently has me veering toward security and compliance and my brain is absolutely fried on trying to figure out what these huge docs actually mean, how they apply to the things I’m responsible for and what we’re supposed to do about it.
Props to all the folks that can do it without losing their mind.
They’re not expecting any one person to implement the whole thing.
Hahaha, tell that to leadership! 😩