Ensure meeting passcodes are required for all meetings

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Zoom web portal (admin) > Account Management > Account Settings > Meeting > Security: verify 'Require a passcode when scheduling new meetings', 'Require a passcode for instant meetings', 'Require a passcode for Personal Meeting ID (PMI)' and 'Embed passcode in invite link' policy are enabled and locked (padlock) at account level.

How it is fixed

Fix method: Guidance or infrastructure patch

Change the setting in the Zoom admin web portal (Account Settings) and lock it so group/user settings cannot override it.