Common use of User IDs and Password Controls Clause in Contracts

User IDs and Password Controls. All users must be issued a unique user name for accessing Protected Data. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee with knowledge of the password. Passwords: are not to be shared; must be at least eight characters; must be a non-dictionary word; must not be stored in readable format on the computer; must be changed every 60 days; must be changed if revealed or compromised and must be composed of characters from at least three of the following four groups from the standard keyboard: • Upper case letters (A-Z); • Lower case letters (a-z); • Arabic numerals (0-9); and • Non-alphanumeric characters (punctuation symbols).

User IDs and Password Controls. All users must be issued a unique user name for accessing Protected Data. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee with knowledge of the password. Passwords: Passwords are not to be shared; must . Must be at least eight characters; must . Must be a non-dictionary word; must . Must not be stored in readable format on the computer; must . Must be changed every 60 days; must . Must be changed if revealed or compromised and must compromised. Must be composed of characters from at least three of the following four groups from the standard keyboard: • Upper case letters (A-Z); ) • Lower case letters (a-z); ) • Arabic numerals (0-9); and ) • Non-alphanumeric characters (punctuation symbols).

User IDs and Password Controls. All users must be issued a unique user name for accessing Protected DataCDPH PCI. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee with knowledge of the password. Passwords: CDPH IPSR (10/19) Passwords are not to be shared; must . Must be at least eight characters; must . Must be a non-dictionary word; must . Must not be stored in readable format on the computer; must . Must be changed every 60 days; must . Must be changed if revealed or compromised and must compromised. Must be composed of characters from at least three of the following four groups from the standard keyboard: • Upper case letters (A-Z); ) • Lower case letters (a-z); ) • Arabic numerals (0-9); and ) • Non-alphanumeric characters (punctuation symbols).