attachment-0001
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Comment: "DefaultPasswordEnabled" needs some clarification:<br>
<ol>
<li>What kind of "administrator passwords or other credentials"
are included? Only passwords for admin accounts that are
security-relevant (e.g., not an administrator password that
permits a device admin to change non-security settings)?</li>
<li>What kind of credentials?<br>
</li>
<li>Although not as important as the first clarification, it might
be more clear to change the sense of the whole thing to
"DefaultPasswordsChanged" (0 = not changed).</li>
</ol>
<pre class="moz-signature" cols="76">--
Regards,
Brian Smithson
PMP, CSM, CISSP, CISA, ISO 27000 PA
Senior Security Architect
Global Solutions Engineering
Business Development Center
Ricoh Americas Corporation
<a class="moz-txt-link-abbreviated" href="mailto:bsmithson@ricohsv.com">bsmithson@ricohsv.com</a>
(408)346-4435</pre>
<br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</body>
</html>