2021-04-26-minutes-it-study-session

Home Browse Search

IT employees may share computer administrative,network administrative,and service account passwords with other IT emplovees. 4.4.1.3 System and Hardware Default Passwords IT shall ensure default administrative passwords are chanqed on all IT purchased devices and software.(CJIS 5.9 §5.10.1.4(2)) DHIEOs shall ensure default administrative passwords are chanqed on all department purchased devices and software.(CJIS 5.9 §5.10.1.4(2)) 4.4.1.4 One-time Passwords One-time passwords used as an authenticator shall: •Be a minimum of six (6)randomly qenerated characters •Be valid for a single session •If not used,expire within a maximum of five (5)minutes after issuance (CJIS 5.9 § 5.6.2.1.3),however,new employee temporary account passwords will not expire and must be changed by the employee at first login. 4.4.2 Shared accounts Shared accounts are not allowed unless a strong business case is made,and the risks accepted by the DHIEO.Shared accounts must be approved by the IT Director. Shared accounts shall not be used to access Category [link 7.4.10]3 or 4 data.(CJlS 5.9 § 5.6.1) 4.4.3 Group membership A group contains users who will receive email maßed--sent to the group (distribution list)or have access to network resources (security group). •One individual (or position)will be designated by the DHIEO as the owner of the group. •Access to group membership folders (security groups)must be requested of IT by the DHIEO. •Distribution list membership may be managed by the group owner. 4.4.4 Changes te--aGGountsAccess Control •IT shall grant employees access to information systems based on least privileqes, i.e.,the most restrictive set of rights/privileqes or access needed by employees to perform assigned official duties. DHIEOldesiqnee will communicate to IT requests for employee's access privileges using the followinq systems,which will act as access privileqe chanqe loqs:HR-win- o At hire,use the CAMAS Pre-orientation Checklist 15