Password Policy

Effective: 20 January 2020

Overview

This policy sets out Skylink network’s security measures to provides a framework for secure, acceptable, and appropriate methods to create password. This policy specifies set of rules designed to enhance information security by requiring strong passwords through using complex and longer passwords.

Scope

This policy applies on everyone who works at Skylink Network in any measurements, full-time, part-time or casual, including temporary employees and contractors.

Principles

Skylink Networks understands that Passwords are a critical component of information security. Passwords served as protection when accessing to any user account, data, sensitive information.

• Password must not contain username, first name of last name.
• Password must between 12 and 100 character long.
• Password must be different from previously used ones. (Applicable when resetting passwords)
• Password for departmental ID must not be utilized in any personal or other IT system.
• Password must contains characters from the four primary categories, including:
• Uppercase letters
• Lowercase letters
• Numbers
• Special Characters (e.g., ! @ # $ %) (Do not use < > ‘ & ( ) + = - _ / ? ; : ~ ` {  }  [ ] \ | )

• Password must be reset immediately after becoming aware of active involvement in a security incident
• Password must not be shared with anyone
• Password should not be written down in any format that anyone else can interpret

Responsibility

The IT Policy shall be implemented by the IT Administrator to maintain the above quality management systems throughout the Skylink network.

Compliance and Review

The IT Administrator  is responsible for establishing, overseeing, and assessing achievement against measurable objectives in relation to goals set out in this policy.

The IT Department is responsible for all other objectives and initiatives set out in this policy.

Infringement of this Policy

Skylink network has a long-standing commitment to conduct our business in compliance with all applicable local and international laws and regulations and in accordance with the highest ethical business principles and any violations of the policy will lead to disciplinary action up to and including dismissal of personnel/contract cancellation.

Further Information

For further information, contact with the Human Resources Department or Compliance Administrator