What is the level 3 password complexity of ISO? How often is it replaced?

Equal insurance 2.0 The policy reinforces the requirements for passwords , On the basis of traditional information system model, it not only increases the expansion requirements of new technology , More comprehensive coverage of protected objects , It also strengthens the application and management requirements of cryptographic technology , Including communication transmission 、 data storage 、 Identification 、 Product procurement 、 There are password related requirements in use and key management . Therefore, many enterprises that have passed the third grade insurance are asking , What is the complexity of the level 3 password for equal security ？ How often ？

What is the complexity of the level 3 password for equal security ？ How often ？

【 reply 】： The third level of waiting insurance requires a password of more than eight digits , Case write + Special characters + Numbers , Add salt , Use twice md5 encryption . More Than This , Also require user passwords every 3 Replace it once a month , Updated password 5 It cannot be repeated within one time .

Knowledge development 1： Share the experience of three-level insurance handling process

1、 grading （ Enterprise independent grading - Expert review - Reviewed by the competent department - Examined and approved by the public security organ ）

2、 Keep on record （ The enterprise submits the filing materials - Examined and approved by the public security organ - Issue Filing Certificate ）

3、 Evaluation （ Rating ）

4、 Construction rectification （ Safety construction - Safety rectification ）

5、 To supervise and inspect （ The public security organs supervise and inspect every year ）

Knowledge development 2： After level 3, use the Xingyun housekeeper fortress machine ！

After level 3, use the Xingyun housekeeper fortress machine ！ Xingyun housekeeper fortress machine is the industry-leading 、 Fully meet the waiting guarantee 2.0 Required information security operation and maintenance audit system , Well tested , Has obtained the identity authentication of computer information system security products （ The Internet ） Class sales license . It has centralized control 、 Multiple protection and other characteristics , Support cloudy 、 A hybrid cloud IT framework , All-round protection of enterprise information security , It's a necessary weapon for first-class insurance .