The systems manager must limit the access of system users to the level necessary to perform their official duties. The Director, Diplomatic Security Service may authorize access to special agents of the Department of State and other Federal law enforcement agencies in the conduct of investigations for employee misconduct or the violation of any Federal law. As required by Diplomatic Security regulations, the systems manager assigns randomly generated alphanumeric passwords every 6 months. All system users must use the most stringent access controls available when processing information concerning an individual, which is considered to be compromising, adverse, embarrassing, or derogatory. Users should store such information on the system for the minimum amount of time necessary.
Unclassified workstations are never to be left unattended when logged on.
All activity occurring when the workstation is functioning is the responsibility of the logged-on user. The systems manager has implemented a function to ensure that the system automatically disconnects a logged-on workstation from the system or locks the workstation after a predetermined period of inactivity. The systems manager also limits unsuccessful logon attempts from any workstation. If the predetermined number of logon attempts is exceeded, the system will lock out the workstation. Only the system staff has the capability to reset a workstation after lockout.