Password Protection Policy
1. Purpose
Passwords are an important aspect of computer security. A poorly chosen password may result in unauthorized access and/or exploitation of Parmonic's resources. The purpose of this policy is to establish a standard for creation of strong passwords, the protection of those passwords, and the frequency of change.
2. Scope
The scope of this policy includes all customers who have or are responsible for an account or any form of access that requires a password on any system that resides at Parmonic.
3. Policy
All Parmonic users are responsible for following Parmonic's “Password Requirements,” as outlined below, to select, secure and change their passwords.
4. Password Requirements:
4.1 Password Creation
The password cannot contain all or part of your user account name or login id.
The password must be at least eight (8) characters in length.
The password can contain characters from three of the following categories:
-
- English uppercase characters (A through Z)
- English lowercase characters (a through z)
- Numbers (0 through9)
- Nonalphabetic characters (for example, !, $, #, %)
The following are examples of passwords that follow the necessary criteria. Do not use these examples.
-
- &Ez2do, Suce$$ful, 2S!ncere, Etc&etc,
4.2 Password Change
Passwords must be changed regularly.
The three previous passwords cannot be used.
The password cannot be changed again until a period of 24 hrs has passed.
4.3 Password Protection
Passwords must not be shared with anyone. All passwords are to be treated as sensitive and confidential information.
Passwords must not be inserted into email messages or other forms of electronic communication.
Passwords must not be revealed over the phone to anyone.
Do not reveal a password on questionnaires or security forms.
Do not hint at the format of a password (for example, "my family name").
Do not share passwords with anyone, including administrative assistants, secretaries, managers, coworkers while on vacation, and family members.
Do not write passwords down and store them anywhere in your office. Do not store passwords in a file on a computer system or mobile devices (phone, tablet) without encryption.
Any user suspecting that his/her password may have been compromised must report the incident to Parmonic Support and change all passwords.
4.4 Password Reset
If a password is forgotten it can be reset by email address provided at creation of the Parmonic account.