Goal: Implement procedures to monitor log-ins and report discrepancies related to this activity.
The purpose of this policy is to identify unauthorized attempts to penetrate systems thru the illicit use of existing users’ passwords.
Procedure: Whenever feasible the Security Manager shall use software to monitor log-in attempts into the systems.
- Software shall detect failed attempts and lock out the user after three unsuccessful attempts in a period of five minutes.
- Repeated instances of failed attempts under the same user name shall require:
- Investigation by Security Manager of potential threat.
- Deletion of user from system and re-establishment of rights under a different name/password.
