Complete site description is attached Threat and Countermeasure Check List. An auditing tool is used to log activity.
Passwords are at least seven characters in length.
Passwords are changed at least once a year. User Passwords are known only by the user. Owner password is protected to the same level as the data contained on the computer. MacOS has no automated ways to verify password length or timeouts. It is understood that this will be handled via standard operating procedures.