The system administrator updates operating system and application patches at least quarterly. Attach the COPS report to the back of this risk assessment. A copy of the written enforced process for establishing, using, and terminating an account for this IS is attached to this risk assessment. All accounts are password protected. User passwords are known only by the user.
Passwords are at least seven characters in length.
Passwords are changed at least once a year. There are no modems connected to this computer. Portmapper is not running. IS does not provide information, by any other method to unauthenticated users, programs etc. Login banner containing an abbreviated version of the organizational acceptable use policy is displayed at logon for each user.