User Security Policy

Steps must be taken to ensure that user accounts are not used without their owners' consent and that accounts are not active for any longer than they are required. The standards governing these areas are found in the Password Policy and the Account Deactivation Policy, respectively. The creation of usernames is governed by the Naming Convention Policy.

Additionally, it is important that users, especially those users who have access to sensitive data, are aware of security concerns and computing best-practices. The User Training Policy presents requirements to address this issue.