10-28-19-R - Laserfiche WebLink

Home Browse Search

City of Arden Hills Personnel Policy'_` Effective February 29, 2016 ri` 1 ILN HILLS Amended December- ' n October 28 2019 Password Protection Guidelines 1. Passwords should be treated as confidential information. No employee is to give, tell, or hint at their password to another person, including IT staff, administrators, superiors, other co-workers, friends, and family members, under any circumstances. 2. If someone demands your password, refer them to this policy or have them contact the IT Department. 3. Passwords are not to be transmitted electronically over the unprotected Internet, such as via e-mail. However, passwords may be used to gain remote access to company resources via the City's IPsec-secured Virtual Private Network or SSL - protected Web site. 4. No employee is to keep an unsecured written record of his or her passwords, either on paper or in an electronic file. If it proves necessarily to keep a record of a password, then it must be kept in a controlled access safe if in hardcopy form or in an encrypted file if in electronic form. 5. Do not use the "Remember Password" feature of applications. 6. Passwords used to gain access to City systems should not be used as passwords to access non -City accounts or information. 7. If possible, don't use the same password to access multiple database or network systems. 8. If an employee either knows or suspects that their password has been compromised, it must be reported to the IT Department and the password changed immediately. 9. The IT Department may attempt to crack or guess users' passwords as part of it ongoing security vulnerability auditing process. If a password is cracked or guessed during one of these audits, the user will be required to change his or her password immediately.