Security News > 2023 > July > Password Management Policy

This policy from TechRepublic Premium provides guidelines for the consistent and secure management of passwords for employees and system and service accounts.

These guidelines include mandates on how passwords should be generated, used, stored and changed as well as instructions for handling password compromises.

GENERAL REQUIREMENTS. Blank or easily guessed passwords, such as "Password," are never permitted for any account, no matter how trivial.

Passwords must be complex, containing at least eight characters and a mixture of lowercase, uppercase, numbers and punctuation characters.

Passwords should never contain security-sensitive information, such as an employee's Social Security number or date of birth.

A Windows account password should not be the same as a QuickBooks password.

News URL

https://www.techrepublic.com/resource-library/downloads/password-management-policy/