SOP For Password Policy For Computer Systems

Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1of 2

SOP for Password Policy for Computer Systems

Standard operating procedure for computer system passwords and data backup and storage.

1.0 PURPOSE

To lay down the procedure for password policy for computerized systems at Probus logistics.

2.0 SCOPE

This SOP shall be applicable for the instruments/equipment wherein data is generated and stored in the computerized systems in the facility.

3.0 RESPONSIBILITY

Network System Administrator

4.0 PROCEDURE

System, Password policies for various instruments/ software shall be followed as the below mentioned procedure.

4.1 Password Policy

4.1.1 Each user shall have unique Username and Password.


4.1.2 Password validity shall be 90 Days.
4.1.3 Password shall have at least 8 characters.
4.1.4 System shall not acquire last 5 expired passwords.
4.1.5 Account shall be lockout automatically after 5 wrong login attempts. Lockout of user shall be unlocked only by administrator.
4.1.6 User account must be protected by 2 Factor-Authentication.

4.2 User Management Policy

Privilege Groups: There shall be three different level of users (i.e., Administrator, Reviewer and User) and following are the p r i v i l e g e d g r o u p in
the decreasing order based on the privileges assigned.
4.2.1 Administrators: Head-IT or System Network Administrator shall be the member of this group. The member of this group has maximum rights
and have rights to assign the privileges to the other privilege group.
4.2.2 Reviewer: Head-QC/ Section Head-QC/ Designee shall be the member of this group. The member of this group shall have rights e.g.,
Create/ Delete/ Edit user, Create/ Edit Method files, Create and Edit Custom calculations, view audit trail etc.
4.2.3 User: The person responsible for keeping the password secure and update them after their validity expires. User shall have rights e.g.,
change password, select mode of 2nd factor of authentication i.e., verification code via SMS or Microsoft Authentication application.

5.0 ABBREVIATIONS

5.1 SOP: Standard Operating Procedure


5.2 IT: Information Technology
5.3 QC: Quality Control

You might also like