Minimum requirements for the use of cryptographic controls

Establishes use of passwords as primary authentication mechanism

Requires the use of cryptographic controls