These include shared accounts, unique user accounts without required passwords, unique user accounts where the password does not need to be changed, and administrators who use their privileged accounts to perform user activities. Shared accounts are a poor choice because they allow too many people access to the same thing (Stone, 2008). The administrator accounts have the same problem. Unique user accounts are a better choice, but if the password never needs changing it can eventually be hacked, and if the password is not needed at all there is very little to stop other people from using the account even if it is supposed to be unique to a particular user (Stone, 2008). That is worth considering, because it is much safer to have unique user accounts with required passwords that have to be changed as strict intervals.
Shared user accounts and unique user accounts that are not password protected are no longer allowed. In addition, unique user accounts will now be required to have their passwords changed immediately and once every 30...
Administrators will no longer have any access to these user accounts without permission from the user. After the administrator task has been performed on that user account, the password will again have to be changed. This is to protect the safety and security of all users of the system and all of the data that belongs to their user accounts.
While it may seem a hassle to change passwords frequently, there are many ways to remember new, updated passwords. They can be written down and stored in a safe place, and they can also be stored online through companies that save passwords. Some browsers also provide this service. Always make sure the passwords that are changed for the user accounts are protected, as allowing them into the wrong hands defeats the purpose.
References
Anderson, C. (2005). What's the difference between policies and procedures?, Bizmanualz.
Stone, D. (2008). Global public policy, transnational policy communities and their networks. Journal…
