23 CAR § 355-1406. Security access control

(a) The on-line monitoring system must support either a hierarchical role structure whereby user and password define program or individual menu item access, or logon program/device security, based strictly on user and password or PIN. (b) In addition, the online monitoring system shall not permit the alteration of any significant log information communicated from the EGS. (c) Additionally, there should be a provision for system administrator notification and user lockout or audit trail entry after a set number of unsuccessful login attempts.