ISM-1593 · September 2026

Setting credentials for user accounts

Guidelines for system access / Credential management / Setting credentials for user accounts

Control: ISM-1593
Revision: 2
Last updated by ASD: Sep-26
Edition / OSCAL release: September 2026 / 2026.09.4

Official control wording

Human users provide sufficient evidence to verify their identity when first requesting credentials, when requesting the reset of any credentials, when requesting the temporary disabling of any credentials, and when requesting the enrolment or re-enrolment of any credentials.

Applicability

Non-classified (NC)
OFFICIAL: Sensitive (OS)
PROTECTED (P)
SECRET (S)
TOP SECRET (TS)

These are ASD’s applicability markings. Select and tailor controls for your system’s risk, classification and operating context with the system owner and authorising officer.

Implementation guidance

This control is included as official reference material. We have not published a reviewed Kubernetes implementation mapping for it. Browse the 23 guides with bounded public mappings.

Official source

ASD’s ISM OSCAL v2026.09.4 · Original catalogue JSON · Pinned checksums and edition details

Control source identifier: ism-1593. Check the official release before relying on this snapshot for an assessment.

Official control wording and applicability: Australian Signals Directorate, © Commonwealth of Australia 2026. September 2026 ISM, OSCAL v2026.09.4, reproduced under CC BY 4.0. Formatting is adapted for this website.

Latticework Systems’ implementation guidance is our interpretation. Provenance and scope.