KittCoIPAWScogMOU_fully executed

Home Browse Search

o Passwords shall not be any word, noun, or name spelled backwards or with a single digit appended, or with a two -digit "year" string, such as 98xyzl 23. o Pass phrases, if used in addition to or instead of passwords, should follow the same guidelines. o Passwords shall not be the same as the User ID, 0 Users shall either log off or lock their workstations when unattended. ® Workstations shall be configured to either log off, or activate a password -protected lock, or password -protected screensaver within fifteen (IS) minutes of user inactivity. * Locked sessions shall remain locked until the user re -authenticates. 0 Workstations shall be protected from theft. o A user's account shall be automatically locked after three consecutive failed logon attempts. * The automatic lockout period for accounts locked due to failed login attempts shall be set for a minimum of twenty (20) minutes. * A process shall exist for manually unlocking accounts prior to the expiration of the twenty (20).minutc, period, after sufficient user identification is established. o Sessions shall automatically be terminated after sixty (60) minutes of inactivity, 0 Users are required to change their passwords at least once every 90 days. * Passwords must be promptly changed whenever a compromise of a password is known or suspected. 2.4 Integrity Controls & Data Protection o All computer workstations accessing 1PAWS-OPEN must be protected by up-to-date anti -virus software. Virus scans must be performed on a periodic basis and when notified by the anti -virus software. o Users accessing interoperable system(s) to utilize IPAWS-OPEN must: • Physically protect computing devices such as laptops, PEDs, blackberry devices, smartphones, etc; • Protect sensitive data sent to or received from IPAWS-OPEN; • Not use peer -to -peer (M) file sharing, which. can provide a rnechanism for the spreading of viruses and put sensitive information at risk; • Not program computing devices with automatic sign -on sequences, passwords or access credentials when utilizing IPAWS-OPEN.