68 IAC 25-5-2 Access privileges and password requirements

Sec. 2. (a) The system administrator shall establish, revise, and deactivate user accounts as follows: (1) Application functions for a user shall be limited to the user's current job responsibilities. (2) User accounts shall be disabled upon employee termination or change in employee job responsibilities that no longer require access to the LMGS within twenty-four (24) hours of termination or change. (b) Security parameters for passwords shall, at a minimum, meet industry technical standards.