Controls for Identification Codes & Passwords—11​.300

"Persons who use electronic signatures based upon use of identification codes in combination with passwords shall employ controls to ensure their security and integrity. Such controls shall include:"

ID and passwords are given specific mention in the regulation as they are by far the most commonly used electronic signature components.