Common use of User IDs and Password Controls Clause in Contracts

User IDs and Password Controls. i. All users must be issued a unique username for accessing PII. ii. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee within twenty-four (24) hours. Note: Twenty-four (24) hours is defined as one (1) working day. iii. Passwords are not to be shared. iv. Passwords must be at least eight (8) characters. v. Passwords must be a non-dictionary word. vi. Passwords must not be stored in readable format on the computer or server. vii. Passwords must be changed every ninety (90) days or less. viii. Passwords must be changed if revealed or compromised. ix. Passwords must be composed of characters from at least three (3) of the following four (4) groups from the standard keyboard: WKW0722 -A1 Page 7 of 18 September 18, 2023 DocuSign Envelope ID: DC0B82C5-AF7E-4998-B860-0DAF084A6DDE A. Upper case letters (A-Z) B. Lower case letters (a-z) C. Arabic numerals (0-9)

User IDs and Password Controls. i. All users must be issued a unique username for accessing PII. ii. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee within twenty-four (24) hours. Note: Twenty-four (24) hours is defined as one (1) working day. iii. Passwords are not to be shared. iv. Passwords must be at least eight (8) characters. v. Passwords must be a non-dictionary word. vi. Passwords must not be stored in readable format on the computer or server. vii. Passwords must be changed every ninety (90) days or less. viii. Passwords must be changed if revealed or compromised. ix. Passwords must be composed of characters from at least three (3) of the following four (4) groups from the standard keyboard: WKW0722 -A1 Page 7 of 18 September 18, 2023 DocuSign Envelope ID: DC0B82C5C1699981-AF7E-4998367A-4E93-B860B66A-0DAF084A6DDECA0849068709 DocuSign Envelope ID: 81A5495A-230D-4264-8358-EB12B24A8B8D DocuSign Envelope ID: 8FC5ECED-4536-49EB-A4AB-9CA23D0B1D81 A. Upper case letters (A-Z) B. Lower case letters (a-z) C. Arabic numerals (0-9)

User IDs and Password Controls. i. All users must be issued a unique username for accessing PII. ii. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee within twenty-four (24) hours. Note: Twenty-four (24) hours is defined as one (1) working day. iii. Passwords are not to be shared. iv. Passwords must be at least eight (8) characters. v. Passwords must be a non-dictionary word. vi. Passwords must not be stored in readable format on the computer or server. vii. Passwords must be changed every ninety (90) days or less. viii. Passwords must be changed if revealed or compromised. ix. Passwords must be composed of characters from at least three (3) of the following four (4) groups from the standard keyboard: WKW0722 -A1 WDM0922-A1 Page 7 of 18 September 18, 2023 DocuSign Envelope ID: DC0B82C5-AF7E-4998-B860-0DAF084A6DDE A. Upper case letters (A-Z) B. Lower case letters (a-z) C. Arabic numerals (0-9)

User IDs and Password Controls. i. All users must be issued a unique username for accessing PII. ii. Username must be promptly disabled, deleted, or the password changed upon the transfer or termination of an employee within twenty-four (24) hours. Note: Twenty-four (24) hours is defined as one (1) working day. iii. Passwords are not to be shared. iv. Passwords must be at least eight (8) characters. v. Passwords must be a non-dictionary word. vi. Passwords must not be stored in readable format on the computer or server. vii. Passwords must be changed every ninety (90) days or less. viii. Passwords must be changed if revealed or compromised. ix. Passwords must be composed of characters from at least three (3) of the following four (4) groups from the standard keyboard: WKW0722 -A1 Page 7 of 18 September 18AMR0121-A1 January 12, 2023 2024 DocuSign Envelope ID: DC0B82C538FE53CB-23DB-4F33-AF7E-4998BEA3-B860-0DAF084A6DDE052481BD6AFC A. Upper case letters (A-Z) B. Lower case letters (a-z) C. Arabic numerals (0-9)