Common use of User IDs and Password Controls Clause in Contracts

User IDs and Password Controls. All users must be issued a unique user name for accessing DHCS data. Passwords are not to be shared. Must be at least eight characters. Must be a non- dictionary word. Must not be stored in readable format on the computer. Must be changed every 60 days. Must be changed if revealed or compromised. Must be composed of characters from at least three of the following four groups from the standard keyboard: • Upper case letters (A-Z) • Lower case letters (a-z) • Arabic numerals (0-9) • Non-alphanumeric characters (punctuation symbols)