Many systems utilise PIN codes to access features or services. The following guidelines should be applied as far as possible in all cases of PIN code use. All codes should be unique to individuals so that an audit trail can be established and security enforced. PINs should be randomly generated. PINs should not be activated until allocated to a user.
PINs are more secure the longer they are.
If default values are four digits, get these increased. PINs should never be easy to guess. These are usually attempted first by fraudsters. Ensure that the distribution and control of PINs are secure within the organisation. These are valuable commodities.