387a49cb__Critical_Security_Control__16__Description
[ID #] CSC 16-17 (NEW) [Category] Advanced [Description] 
Verify that all password files are encrypted or hashed and that these files cannot be accessed without root or administrator privileges. Audit all access to password files in the system.