Every personal logon account must have a password. The password associated with an account helps ensure that the account owner alone can gain access to information resources associated with the account.
Any activity generated by a particular logon account is the responsibility of the account owner.
All passwords will be set up by default to expire after 30 days, if possible. The system should warn the account owner several days prior to the expiration of the password, if possible. Users will be allowed to change their own passwords within the specific password standards. All passwords will be set by default to not be changed within the 24-hours period after being changed. User should change their passwords immediately if they believe their password has been compromised.