Password Policy

Password Policy

  1. Purpose: To ensure the creation and use of strong, secure passwords to protect company data.

  2. Scope: All employees and contractors with access to company systems.

  3. Requirements:

    • Length: Minimum of 12 characters.

    • Complexity: Must include uppercase and lowercase letters, numbers, and symbols.

    • Change Frequency: Passwords must be changed every 90 days.

    • Unique Passwords: No reuse of the last 6 passwords.

  4. Storage and Sharing: Passwords must not be written down or shared. Use a company-approved password manager.

  5. Compliance Monitoring: Regular audits to enforce policy adherence.

  6. Violation Consequences: Non-compliance will result in disciplinary action.