YouTube – NIST 800-171 Control 3-5-10 – Store and transmit only cryptographically-protected passwords

CMMC Level 2 Assessment Guide

Open Web Application Security Project (OWASP) – Testing for Default Credentials

NIST SP 800-175b Guideline for Using Cryptographic Standards in the Federal Government

NIST SP 800-111 Guide to Storage Encryption Technologies for End User Devices

YouTube – Pros & Cons of Full Disk Encryption

SANS – Password Construction Guidelines

SANS – Password Protection Policy