387a49cb__Critical_Security_Control__16__Description
[ID #] CSC 16-15 (NEW) [Category] Advanced [Description] 
For authenticated access to web services within an enterprise, ensure that account usernames and passwords are passed over an encrypted channel and associated password hash files are stored securely if a centralized service is not employed.
SANS Institute - Critical Security Control: 16
Description