Policy and Procedures of the users account

• Presentation by :

Hani AllehyaniAhmed Alluhaybi

OVERVIEW

1 of 21

Introduction Definition What are kind of police?• Basic Principles :• General Principles : Questions

Introduction

2 of 21

These policies regulate the direct and indirect use of Technology resources across most companies in the world.

The success of any information security program lies in policy development

Definition

3 of 21

The basic principles by which a company is guided.

What are kind of polices?

4 of 21

• There are two kinds of policies • Basic Principles :• General Principles :

Basic Principles

5 of 21

• Every user should have one identity Connect all users description by ID that has 10 number to make easy to research

Basic Principles

6 of 21

• Every user account should be used only by the person who issued to him

Not allow to any user give to another user his username and password so If the user Account is misused, the person to whom the account was issued must take sole responsibility for those actions

Basic Principles

7 of 21

User account or email addresses shall not affect after account retirement and after 12 month

If the user account retire you will lose it after 12 month. There are two main reasons for this policy . Firstly, it is a requirement for our organization membership. Secondly, experience has shown that re-using an account it means still receives lots of private newsletters and messages.

Basic Principles

8 of 21

All accounts must adhere to the principle of least privilege

The level of access to resources granted to all users Account should be commensurate with the privileges required by the owner to do his job

Basic Principles

9 of 21 2

In our organization the password is required to at least meet the following:• At least 8 characters long• Contain at least one upper case letter and at least one lower case letter• Contain at least one number or punctuation character• Not be a dictionary word• Be less than 12 months old

General Principles

10 of 21

semi-user accounts There are some cases in which two users have the same name Mohammed Abdullah Allehyani   M a allehyani or lehyani1

continue

General Principles :

11 of 21

How to create username

A good naming convention makes it easy for users to remember their logon names

continue

General Principles

12 of 21

Signal user accountAll user ids should take the form

Mohammed Abdullah Allehyani   M a lehyani

continue

General Principles

13 of 21

semi-user accounts There are some cases in which two users have the same name Mohammed Abdullah Allehyani   M a allehyani or lehyani1

continue

General Principles

14 of 21

Service accounts Any users have Service Accounts shall have the prefix “svc”, followed by a descriptive name of the service the account relates to it .

The Exchange service account would be:

Procedures of users account

15 of

Account Creation Process: If the individual is not entered into the domain within 60 days after the originally intended start date you will be lost the account .

21

Procedures of users account

16 of

Account Removal Process

HR will regularly notify IT Services of changes in employee status for remove or increase the privileges it related to the status change

21

Procedures of users account

17 of

account is locked

Account locked duration 10 minutes and you will remove the screen to screen saver .If you do not touch or remove (keyboard or mouse ) after this time account is locked .

21

Procedures of users account

18 of

Ports

All ports like CD/DVD ,USB and FLOPY are locked except the ports connect the device like (printer, scanner , barcode……etc.) by using Trend Antiviruses programme

21

Procedures of users account

19 of

Sharing

You should be chosen the username that give him permission for files, folders or drives. Do not use default shares you should be removed

21

Procedures of users account

20 of

Antivirus software

Antivirus software should be updated timely in consultation with System Administrator

21

Procedures of users account

21 of

Partition  Do not give others the opportunity to look over your shoulder if you are working on sensitive data

21