Database / Relational / Controls / v2026.11
Password Management
CCC.RDMS.CN01 · Access Control
Ensure default vendor-supplied DB administrator credentials are replaced with strong, unique passwords and that these credentials are properly managed using a secure password or secrets management solution.
Related Capabilities
| ID | Title | Description |
|---|
| CCC.RDMS.CP07 | DB Self Managed Credentials | The service always supports database users authenticated by a username and password that the user creates and manages. |
Related Threats
| ID | Title | Description |
|---|
| CCC.RDMS.TH01 | Unauthorized Access via Default Credentials | If default credentials are not disabled or changed, unauthorized access may be gained to the RDMS environment. This may lead to data breaches, data manipulation, or overall compromise of the database instance. |
Assessment Requirements
| ID | Text | Applicability |
|---|
| CCC.RDMS.CN01.AR02 | When an attempt is made to authenticate to the database using known default credentials, the authentication attempt MUST fail. | tlp-amber, tlp-red |