A significant amount of money is spent each year on computer equipment.
Departments rely heavily on information created, processed and stored on computers.
Logical access should be limited to those users who need access to perform job responsibilities. Sufficient access controls, such as passwords, should be in place to ensure that employees using a computer are able to maintain the security of the information. Passwords should be at least 6 alphanumeric characters. They should be changed on a periodic basis or when a user leaves the department. Computers logged on should not be left unattended.