Agenda - Council - 01/24/2012 - Laserfiche WebLink

Home

All users must use and maintain unique IT- issued login IDs for computer and network - related access. Login IDs are not to be shared with others, and corresponding passwords must remain confidential. Multi -user or generic login IDs are permissible only in special circumstances approved and maintained by IT. User passwords must adhere to the following requirements: • Have a minimum of at least six alphanumeric characters in length • Must be changed every 180 days • Have at least one numeric digit as well as letters, for example: jargOn5 • Have not been previously used in the last three password rotations Appropriate network access shall be assigned by the IT department to each user login ID, and users may only log into computers and equipment with their assigned login ID. Passwords are not to be shared with anyone, and will be forced to change periodically. New passwords should not be easily guessed. Any employee who forgets their password or suspects that their password's security has been compromised, may contact the IT department to be issued a new one, which must then be changed immediately. Physical Security City users are expected to provide reasonable security to their computer workstations and related IT equipment. This includes ensuring that passwords are not written down in accessible places, removable media must be kept in a secured area, and that confidential data is not displayed in such a manner that unauthorized personnel can view it. All IT equipment is City property and must remain on current premises. Users may not move IT equipment outside of its assigned area without prior approval from the IT department. Designated portable equipment, such as projectors, laptop computers, and digital cameras, may be removed from City buildings only for City business. Portable equipment must be reserved and checked out only to City users. Users are expected to provide appropriate "common sense" protection against theft, breakage, environmental damage, and other risks. Users are required to log off computer workstations when absent for an extended time, such as end of day. Users may, however, "lock" their workstation instead when absent for a short period of time, such as during a meeting or over lunch. Virus Protection All computer workstations, laptops, and servers must be protected from viruses using up -to -date antivirus software. Users may not alter their system's configuration or take other steps to defeat virus protection devices or systems. All files on removable media must be scanned for viruses prior to installation onto or access from City computer equipment. Any files suspected or known to contain viruses must be immediately reported to the IT department for proper handling. Version: 2006August8 7