| Introduction |
Computer accounts are the means used to grant access to The
City Of El Paso Information Resources. These accounts provide
a means of providing accountability, a key to any computer security
program, for Information Resources usage. This means that creating,
controlling, and monitoring all computer accounts is extremely
important to an overall security program. |
| Purpose |
The purpose of The City Of El Paso Account Management Security
Policy is to establish the rules for the creation, monitoring,
control and removal of user accounts. |
| Audience |
The City Of El Paso Account Management Security Policy applies
equally to all individuals with authorized access to any City
Of El Paso Information Resources. |
| Account Management Policy |
- All accounts created will have an associated request and
approval that is appropriate for The City Of El Paso system
or service.
- All users will sign The City Of El Paso Information Technology
Security Acknowledgement and Nondisclosure Agreement before
access is given to an account.
- All accounts will be uniquely identifiable using the assigned
user name.
- All default passwords for accounts will be constructed in
accordance with The City Of El Paso Password Policy.
- All accounts will have a password expiration that complies
with The City Of El Paso Password Policy.
- Accounts of individuals on extended leave (more than 30
days) will be disabled.
- System Administrators or other designated staff:
- Are responsible for removing the accounts of individuals
that change roles within The City Of El Paso or are separated
from their relationship with The City Of El Paso
- Will have a documented process to modify a user account
to accommodate situations such as name changes, accounting
changes and permission changes
- Will have a documented process for periodically reviewing
existing accounts for validity
- Are subject to independent audit review
- Will provide a list of accounts for the systems they
administer when requested by authorized The City Of El
Paso management
- Will cooperate with authorized The City Of El Paso management
investigating security incidents
|
| Disciplinary Actions |
Violation of any of these policies and/or procedures may result
in disciplinary action, which may include termination for employees
and temporaries; a termination of employment relations in the
case of contractors or consultants; dismissal for interns and
volunteers. Additionally, individuals are subject to loss of The
City Of El Paso Information Resources access privileges, civil,
and criminal prosecution. |
print-version