Allocation and management of authentication information shall be controlled by a management process, including advising personnel on appropriate handling of authentication information.

Implementation guidance:

Sources:

• ISO/IEC 27001:2022 Annex I, 5.17