2cac8686_plication_Security_and_Privacy__Derived_Security_Controls
Use of default credentials including passwords [Derived Security Controls] 
Change all default passwords across all system components Disable or remove guest and demonstration accounts Use strong passwords to replace default ones (see above) Avoid hard coding of access credentials (and never in software code), but use encryption if possible if necessary to store elsewhere (e.g. configuration files)
Privacy : Application Security and Privacy
Derived Security Controls