02-16-16-WS - Laserfiche WebLink

Home Browse Search

1. Passwords should be treated as confidential information. No employee is to give, tell, or hint at their password to another person, including IT staff, administrators, superiors, other co-workers, friends, and family members,under any circumstances. 2. If someone demands your password,refer them to this policy or have them contact the IT Department. 3. Passwords are not to be transmitted electronically over the unprotected Internet, such as via e-mail. However,passwords may be used to gain remote access to company resources via the City's IPsec-secured Virtual Private Network or SSL-protected Web site. 4. No employee is to keep an unsecured written record of his or her passwords, either on paper or in an electronic file. If it proves necessarily to keep a record of a password, then it must be kept in a controlled access safe if in hardcopy form or in an encrypted file if in electronic form. 5. Do not use the"Remember Password"feature of.applications. 6. Passwords used to gain access to City systems should not be used as passwords to access non-City accounts or information. 7. If possible,don't use the same password to access multiple database or network systems. 8. If an employee either knows or suspects that their password has been compromised, it must be reported to the IT Department and the password changed immediately. 9. The IT Department may attempt to crack or guess users' passwords as part of it ongoing security vulnerability auditing process. If a password is cracked or guessed during one of these audits,the user will be required to change his or her password immediately. FAILURE TO COMPLY Violations of this policy will be treated like other allegations of wrongdoing at the City. Allegations of misconduct will be adjudicated according to the established procedures. Sanctions for inappropriate use on the City's email systems and services may include,but are not limited to,one or more of the following: 1. Temporary or permanent revocation of network access; 2. Termination of employment or suspension;and/or 3. Legal action according to applicable laws and contractual agreements. ACCEPTANCE: PASSWORD POLICY I hereby acknowledge that I have read and understand the Password Policy of the City. I agree to abide by these policies and ensure that persons working under my supervision abide by these policies. I understand that if I violate such rules,I may face legal or disciplinary action according to the applicable law or departmental policy. I hereby agree to indemnify and hold the City and its officers,trustees,employees, and agents harmless for any loss, damage,expense or liability resulting from any claim, action or demand arising out of or related to the user's use of the City owned computer resources and the network, including reasonable attorney fees. Such claims shall include without limitation those based on trademark or service mark infringements, trade name infringements, copyright infringement,unfair competition,defamation,unlawful discrimination or harassment,and invasion of privacy. Name Signature Date