Amazon Web Services – Operational Best Practices for CMMC 2.0 Level 2

YouTube – NIST SP 800-171 Control 3.5.8 Prohibit password reuse for a specified number of generations

CIRT.net – Default Password Database

CMMC Level 2 Assessment Guide

US-CERT – Risks of Default Passwords on the Internet

SANS Whitepaper – Vendor-Supplied Backdoor Passwords – A Continuing Vulnerability

SANS – Password Construction Guidelines

SANS – Password Protection Policy