Employees are required to take all necessary steps to prevent unauthorized access to this information. Keep their passwords secure and unknown to all other persons and refrain from sharing accounts.
Authorized users are responsible for the security of their passwords and accounts.
Passwords should be changed quarterly and should be at least 8 alphanumeric characters. All default passwords must be changed and all guest or anonymous accounts are prohibited. Authorized users should take steps to prevent unauthorized access to their accounts by logging off when their terminal will be unattended. Encryption shall not be used for the transmission of non-confidential information. Use encryption of appropriate information only in compliance with corporate encryption policy.