Laserfiche WebLink
Password Policy <br />Purpose <br />To set a standard for creating, protecting, and changing passwords such that they are strong, <br />secure, and protected. <br />Backqround <br />Passwords are a critical part of information and network security. Passwords serve to protect <br />user accounts, but a password, if compromised, could put the entire network at risk of <br />unauthorized access and loss of electronic data. As a result, all employees are required to take <br />appropriate steps to ensure that they create strong, secure passwords and keep them <br />safeguarded at all times. <br />Scope of the Policv <br />This policy applies to all employees, volunteers or contractors of the City who have or are <br />responsible for a computer account, or any form of access that supports or requires a password, <br />on any system that resides at any City facility, has access to the City network, or stores any <br />non-public City information. <br />Policv <br />General <br />1. Passwords must be changed every 120 days. <br />2. Old passwords cannot be re-used for a period of 12 months. <br />3. Users will be notified by system prompts two weeks in advance of password expiration <br />date. At this time, users will be prompted to select a new password. <br />4. All passwords must conform to strong password guidelines outlined below. <br />Password Construction Guidelines <br />Passwords are used to access any number of City information systems, including the network, <br />database applications, email, and the Internet. Poorly designed passwords are easily cracked, <br />and put the entire system at risk. Therefore, strong passwords are necessary to protect the <br />integrity of the network and data. Try to create a password that is also easy to remember. <br />1. Passwords should not be based on well-known or easily accessible personal <br />information. <br />2. Passwords must contain at least 8 characters. A strong password will contain a series of <br />numbers, letters and special characters and would contain the following: <br />• At least 1(one) uppercase letters (e.g. N) and 1(one) lowercase letters (e.g. t). <br />• At least 1(one) numerical characters (e.g. 5). <br />