387a49cb__Critical_Security_Control__16__Description
[ID #] CSC 16-17 (NEW) [Category] Advanced [Description] 
Verify that all password files are encrypted or hashed and that these files cannot be accessed without root or administrator privileges. Audit all access to password files in the system.
SANS Institute - Critical Security Control: 16
Description