scope:

This module specifies the requirements for password creation, use and management.

This module applies to all:

a) people responsible for designing, developing or managing Network Rail networked systems and services;

b) people within Network Rail who are involved in password management within application development and system architecture; and.

c) Users who have access to Network Rail's information and information systems.

Purpose

This module establishes requirements for password creation, use and management.

It supports Network Rail to implement security controls that mitigate risks to the confidentiality, integrity and availability of networks, information systems, devices and applications and the information assets stored therein.