PASSWORD POLICY

Objective：

1. To make sure all user must use password to access their PC.

2. To prevent loss of data because other users are easily accesssing the PC.

Procedure：

1. The password must be used to login to the PC and to de-activate the screen savers of PCs. A PC that is not in use must be either switched off or de-activated by its screen saver.

2. To use the PC again, the user must enter the password, either on start up or to de-activate the screen saver.

3. If there are changes of staff, the IT Manager must check that the password have been passed on correctly from those leaving to those arriving and then change immediately.

4. The maximum password age for Microsoft login is 90 days ( three months ) with minimum password length is 9 character and account lockout threshold is 5 invalid logon attempts.

5. The maximum password age for PMS login is 90 days ( three months ) with minimum password length is 7 character and account lockout threshold is 3 invalid logon attempts

6. The maximum password age for BOH System is 90 days ( three months ) with minimum password length is 9 character and account lockout threshold is 3 invalid logon attempts.

7. The maximum password age for POS system is 90 days ( three months ) with minimum password length is 7 character alpha numeric and account lockout threshold is 6 invalid logon attempts.