P/W policy:
-
Contain both upper and lower case characters (e.g.,a-z, A-Z)
-
Having digits and punctuation characters as well as letters
(e.g.,0-9, !@#$%^&*()_+|~-=\`{}[]:;<>,./)
-
Standard users: at least 14 characters, including uppercase, lowercase, a number, and a symbol
-
Privileged users (Client Admin, Client HR, Client HR Executive): at least 20 characters, including uppercase, lowercase, a number, and a symbol
-
Passwords expire every 90 days for all users (same frequency for standard and privileged accounts)
-
The last 3 passwords cannot be reused
-
Password should never be written down or stored on-line.
P/W lockout policy:
1) Account lockout threshold - 20 mins
2) Password attempts - 5 times.