Resolution 7619 - Laserfiche WebLink

Home Browse Search

• At least 1(one) special characters (e.g. $). 3. Passwords must not be based on a users' personal information or that of his or her friends, family members, or pets. Personal information includes logon I.D., name, birthday, address, phone number, social security number, or any permutations thereof. 4. Passwords must not be words that can be found in a standard dictionary (English or foreign) or are publicly known slang or jargon. 5. Passwords must not be based on publicly known fictional characters from books, films, and so on. 6. Passwords must not be based on the company's name or geographic location. Password Protection Guidelines 1. Passwords should be treated as confidential information. No employee is to give, tell, or hint at their password to another person, including IT staff, administrators, superiors, other co-workers, friends, and family members, under any circumstances. 2. If someone demands your password, refer them to this policy or have them contact the IT Department. 3. Passwords are not to be transmitted electronically over the unprotected Internet, such as via e-mail. However, passwords may be used to gain remote access to company resources via the City's IPsec-secured Virtual Private Network or SSL-protected Web site. 4. No employee is to keep an unsecured written record of his or her passwords, either on paper or in an electronic file. If it proves necessarily to keep a record of a password, then it must be kept in a controlled access safe if in hardcopy form or in an encrypted file if in electronic form. 5. Do not use the "Remember Password" feature of applications. 6. Passwords used to gain access to City systems should not be used as passwords to access non-City accounts or information. 7. If possible, don't use the same password to access multiple databases or network systems. 8. If an employee either knows or suspects that their password has been compromised, it must be reported to the IT Department and the password changed immediately. 9. The IT Department may attempt to crack or guess users' passwords as part of its ongoing security vulnerability auditing process. If a password is cracked or guessed during one of these audits, the user will be required to change his or her password immediately. Failure to Complv Violations of this policy will be treated like other allegations of wrongdoing at the City. Allegations of misconduct will be adjudicated according to established procedures. Sanctions for 7