Wikis > 2.41 Person or Entity Authentication

Policy

All users within Home and Community Options, Inc.’s information system must follow the various guidelines for person or entity authentication to maintain security and integrity of the system at all times.

Procedure

All users must use their passwords when logging on to the provider’s information system. Passwords should not be written down or disclosed to other members of the staff, friends, family, or anyone else.

A staff member may not use another staff member’s user name and password to access the provider’s information system. Staff members may not give their passwords to other staff members.

Passwords should comply with the following guidelines.

Guidelines

Passwords should consist of between six and 10 characters.

Users should not select as a password any word that can be easily guessed such as:

  • The name of a child
  • A pet
  • A favorite sports team
  • A school he or she has attended
  • A hobby
  • Any other information that a person who knows the user might guess

Users must change their passwords once they become known to others.

Users should change their passwords at least once every year, but not so frequently that they are likely to be forgotten.