passwords and ACEmanager

When ACEManager has been disabled for a given system, is it still necessary to i) change the password for this system on a frequent basis and ii) set up an IP friends list?