RETURN TO CSUN HOMEPAGE
Access Keys

This information applies to pages in the CSUN template system.Windows-press ALT + an access key. Macintosh-press CTRL + an access key.

The following access keys are available:
UNIVERSITY POLICIES AND PROCEDURES
SUBJECT: CAMPUS PASSWORD POLICY
POLICY NO.: 500-07      REVISION: NEW       ISSUED: 7/15/2003       EFFECTIVE: 7/15/2003

POLICY:

Campus Password Policy

PURPOSE:

This policy assures uniform procedures and practices for passwords on all campus IT accounts. The purpose of this policy is to protect the data and operational integrity of the campus wide computing and networking infrastructure, in order that it functions in a secure manner that supports the mission of the University.

PROCEDURES:

All University Colleges and other Administrative Units must observe uniform password policies and controls with regard to lifetime, length, and composition as defined by prevailing hardware, software, and industry standards for data integrity.

1. Password Lifetime
a. All passwords on campus IT accounts must have a maximum and minimum lifetime and must be updated on a regular basis. However, for security reasons password changes may be instituted at any time.
2. Password Length
a. Password length must be within the defined minimum and maximum number of characters.
3. Password Composition
a. Passwords should not be based upon personal information. For example, inappropriate passwords are ones that contain any of the following: personal names, birthdays, social security numbers, employee IDs, or user IDs.
b. Users cannot re-use a password within a given timeframe (e.g., within a 12-month period).
c. Passwords must contain a defined minimum use of character sets (e.g., three character sets). Possible character sets include: alpha characters (a..z, and A..Z), numeric characters (0..9), and punctuations or special characters (e.g., ! , $, &, *, and >).

RESPONSIBILITIES:

The Chief Information Officer (CIO) and all delegated individuals are responsible for the confidentiality of all passwords. The CIO is responsible for mandated password changes in an appropriate and timely manner as necessary for maintaining password confidentiality.

The CIO is responsible for ensuring that the minimum standard for lifetime, length, and composition of passwords are sufficient to meet prevailing hardware, software, and industry standards for data integrity and for ensuring that these standards meet the needs of the Campus.

Users are responsible to maintain and update their passwords to preserve the confidentiality of password-protected data. Passwords are the sole property of account holders, and they are required to make a good faith effort to preserve the privacy of their passwords.

FURTHER INFORMATION:

Chief Information Officer (hilary.baker@csun.edu)


Approved by the President


California State University, Northridge at 18111 Nordhoff Street, Northridge, CA 91330 / Phone: 818-677-1200 / © 2006 CSU Northridge

Last Updated: 4/19/2007