Laserfiche WebLink
Logins and Passwords <br />All users must use and maintain unique IT -issued login IDs for computer and network -related <br />access. Login IDs are not to be shared with others, and corresponding passwords must remain <br />confidential. Multi-user or generic login IDs are permissible only in special circumstances <br />approved and maintained by IT. User passwords must adhere to the following requirements: <br />o Have a minimum of at least six alphanumeric characters in length <br />o Must be changed every 180 days <br />o Have at least one numeric digit as well as letters, for example: jarg0n5 <br />o Have not been previously used in the last five password rotations <br />o Automatic screen lock is initiated with the screensaver after 15 minutes of <br />inactivity. <br />Appropriate network access shall be assigned by the IT department to each user login ID, and <br />users may only log into computers and equipment with their assigned login ID. Passwords are <br />not to be shared with anyone, and will be forced to change periodically. New passwords should <br />not be easily guessed. Any employee who forgets their password or suspects that their <br />password's security has been compromised, may contact the IT department to be issued a new <br />one, which must then be changed immediately. <br />Physical Security <br />a. City users are expected to provide reasonable security to their computer workstations <br />and related IT equipment. This includes ensuring that passwords are not written down <br />in accessible places, removable media must be kept in a secured area, and that <br />confidential data is not displayed in such a manner that unauthorized personnel can <br />view it. <br />b. All IT equipment is City property and must remain on current premises. Users may <br />not move IT equipment outside of its assigned area without prior approval from the IT <br />depaitinent. Designated portable equipment, such as projectors, laptop computers, <br />and digital cameras, may be removed from City buildings only for City business. <br />Portable equipment must be reserved and checked out only to City users. Users are <br />expected to provide appropriate "common sense" protection against theft, breakage, <br />environmental damage, and other risks. <br />c. Users are required to log off computer workstations when absent for an extended time, <br />such as end of day. Users may, however, "lock" their workstation instead when absent <br />for a short period of time, such as during a meeting or over lunch. <br />Virus Protection <br />All computer workstations, laptops, and servers must be protected from viruses using <br />up- to -date antivirus software. Users may not alter their system's configuration or take <br />other steps to defeat virus protection devices or systems. All files on removable media <br />must be scanned for viruses prior to installation onto or access from City computer <br />equipment. Any files suspected or known to contain viruses must be immediately <br />reported to the IT department for proper handling. <br />Wireless Access <br />681Page <br />