CCI-004058

For password-based authentication, maintain a list of commonly used, expected, or compromised passwords on an organization-defined frequency.