← CIS Controls v8 in plain English

4.7 IG1

Control 4 / Secure Configuration of Enterprise Assets and Software

Manage Default Accounts on Enterprise Assets and Software

Think of it likeChanging the default lock on the front door after moving into a new house.

In plain English

Default accounts and settings on every device and program are changed, so no one can break in using factory credentials.

Related CSF subcategories (unofficial mapping)

PR.AA-01: Identities and credentials for authorized users, services, and hardware are managed by the organization.PR.PS-01: Configuration management practices are established and applied.