← Paul Test
doc13957 Passwords_Regulation.pdf
⬇ Export JSONBadge numbers are the reading order (depth-first). Nested children have dashed borders; grandchildren dotted. Hover a box for its type, text and attributes.
Page 1
17 item(s)
JSON
figure (2)
header (2)
heading (5)
text (8)
1 · FIGURE
2 · HEADER
3 · HEADER
4 · FIGURE
5 · TEXT
6 · TEXT
7 · TEXT
8 · TEXT
9 · HEADING
10 · TEXT
11 · HEADING
12 · TEXT
13 · HEADING
14 · HEADING
15 · TEXT
16 · HEADING
17 · TEXT
Page 1 JSON
{
"document_id": 13957,
"page": 1,
"width_pt": 612,
"height_pt": 792,
"rotation": 0,
"pipeline_version": "paddleocr-vl-1.6+paul-48",
"engine": "paddleocr_vl",
"source_run_id": 14068,
"item_count": 17,
"counts_by_type": {
"figure": 2,
"header": 2,
"heading": 5,
"text": 8
},
"build_ms": 1,
"items": [
{
"id": "p1.1",
"order": 1,
"type": "figure",
"bbox": {
"l": 256.8,
"t": 758.16,
"r": 354.24,
"b": 687.12
},
"text": "",
"attrs": {
"role": "page_header",
"block_label": "header_image"
}
},
{
"id": "p1.2",
"order": 2,
"type": "header",
"bbox": {
"l": 229.68,
"t": 679.92,
"r": 381.36,
"b": 650.64
},
"text": "KENTUCKY STATE UNIVERSITY",
"attrs": {
"block_label": "header"
},
"level": 2
},
{
"id": "p1.3",
"order": 3,
"type": "header",
"bbox": {
"l": 241.92,
"t": 644.64,
"r": 369.6,
"b": 631.44
},
"text": "Policies and Regulations",
"attrs": {
"block_label": "header"
},
"level": 2
},
{
"id": "p1.4",
"order": 4,
"type": "figure",
"bbox": {
"l": 232,
"t": 756,
"r": 379.56,
"b": 621.4
},
"text": "",
"attrs": {
"source": "pdf_image"
}
},
{
"id": "p1.5",
"order": 5,
"type": "text",
"bbox": {
"l": 33.84,
"t": 606,
"r": 151.92,
"b": 574.32
},
"text": "REGULATION TITLE:\nPasswords"
},
{
"id": "p1.6",
"order": 6,
"type": "text",
"bbox": {
"l": 33.36,
"t": 555.12,
"r": 326.4,
"b": 521.52
},
"text": "APPLIES TO:\nAll users of KSU information technology resources"
},
{
"id": "p1.7",
"order": 7,
"type": "text",
"bbox": {
"l": 33.6,
"t": 504,
"r": 287.28,
"b": 452.64
},
"text": "ADMINISTRATIVE AUTHORITY:\nChief Information Officer (CIO)\nDepartment of Information Technology (IT)"
},
{
"id": "p1.8",
"order": 8,
"type": "text",
"bbox": {
"l": 33.6,
"t": 434.88,
"r": 288.72,
"b": 401.52
},
"text": "APPROVED BY:\nKentucky State University Board of Regents"
},
{
"id": "p1.9",
"order": 9,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 384.24,
"r": 132.96,
"b": 350.64
},
"text": "EFFECTIVE DATE:\nAugust 8, 2025",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p1.10",
"order": 10,
"type": "text",
"bbox": {
"l": 33.84,
"t": 332.4,
"r": 155.04,
"b": 299.52
},
"text": "NEXT REVIEW DATE:\nAugust 8, 2028"
},
{
"id": "p1.11",
"order": 11,
"type": "heading",
"bbox": {
"l": 34.08,
"t": 283.68,
"r": 187.2,
"b": 269.28
},
"text": "REGULATION STATEMENT:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p1.12",
"order": 12,
"type": "text",
"bbox": {
"l": 33.36,
"t": 250.56,
"r": 579.12,
"b": 187.68
},
"text": "This regulation establishes the minimum requirements for the creation, protection, and management of passwords used to access Kentucky State University's (KSU) Information Technology (IT) resources. The intent of this regulation is to safeguard university systems and data from unauthorized access and misuse by enforcing strong password standards."
},
{
"id": "p1.13",
"order": 13,
"type": "heading",
"bbox": {
"l": 34.32,
"t": 169.92,
"r": 115.68,
"b": 155.76
},
"text": "DEFINITIONS:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p1.14",
"order": 14,
"type": "heading",
"bbox": {
"l": 34.08,
"t": 136.8,
"r": 84.96,
"b": 124.08
},
"text": "Password",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p1.15",
"order": 15,
"type": "text",
"bbox": {
"l": 33.6,
"t": 120.72,
"r": 577.2,
"b": 90.72
},
"text": "A secret word or string of characters used for authenticating the identity of a user to gain access to a protected IT resource."
},
{
"id": "p1.16",
"order": 16,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 72.24,
"r": 209.04,
"b": 59.28
},
"text": "Multi-Factor Authentication (MFA)",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p1.17",
"order": 17,
"type": "text",
"bbox": {
"l": 33.84,
"t": 56.16,
"r": 578.4,
"b": 42
},
"text": "A security process that requires more than one method of authentication from independent categories of"
}
],
"excluded_furniture": {
"first": [],
"last": []
}
}
Page 2
29 item(s)
JSON
heading (6)
list (3)
list_item (16)
text (4)
1 · TEXT
2 · HEADING
3 · HEADING
4 · TEXT
5 · LIST
6
7
8
9
10
11
12
13 · HEADING
14 · TEXT
15 · LIST
16
17
18
19
20
21
22
23 · HEADING
24 · LIST
25
26
27 · HEADING
28 · TEXT
29 · HEADING
Page 2 JSON
{
"document_id": 13957,
"page": 2,
"width_pt": 612,
"height_pt": 792,
"rotation": 0,
"pipeline_version": "paddleocr-vl-1.6+paul-48",
"engine": "paddleocr_vl",
"source_run_id": 14068,
"item_count": 29,
"counts_by_type": {
"heading": 6,
"list": 3,
"list_item": 16,
"text": 4
},
"build_ms": 3,
"items": [
{
"id": "p2.1",
"order": 1,
"type": "text",
"bbox": {
"l": 33.84,
"t": 754.32,
"r": 215.52,
"b": 740.4
},
"text": "credentials to verify a user's identity."
},
{
"id": "p2.2",
"order": 2,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 722.16,
"r": 93.36,
"b": 708.24
},
"text": "PROCESS:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.3",
"order": 3,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 690.72,
"r": 203.52,
"b": 678.24
},
"text": "Password Creation Requirements",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.4",
"order": 4,
"type": "text",
"bbox": {
"l": 33.6,
"t": 675.84,
"r": 577.92,
"b": 648.24
},
"text": "A strong password is long and contains a mix of letters, numbers, and special characters. All passwords used to access KSU IT resources must meet the following requirements:"
},
{
"id": "p2.5",
"order": 5,
"type": "list",
"bbox": {
"l": 33.36,
"t": 633.51,
"r": 383.04,
"b": 526.08
},
"text": "",
"attrs": {
"item_count": 7
},
"children": [
{
"id": "p2.5.1",
"order": 6,
"type": "list_item",
"bbox": {
"l": 33.36,
"t": 633.51,
"r": 254.4,
"b": 618.858
},
"text": "Be a minimum of 12 characters in length."
},
{
"id": "p2.5.2",
"order": 7,
"type": "list_item",
"bbox": {
"l": 33.84,
"t": 618.26,
"r": 383.04,
"b": 602.88
},
"text": "Contain at least one character from any of the following categories:",
"marker": "•"
},
{
"id": "p2.5.3",
"order": 8,
"type": "list_item",
"bbox": {
"l": 33.84,
"t": 602.73,
"r": 282.24,
"b": 588
},
"text": "Contain an uppercase alphabet character (A-Z)",
"marker": "•"
},
{
"id": "p2.5.4",
"order": 9,
"type": "list_item",
"bbox": {
"l": 34.08,
"t": 587.48,
"r": 249.6,
"b": 572.4
},
"text": "Contain a special character (*, %, !, etc.)",
"marker": "•"
},
{
"id": "p2.5.5",
"order": 10,
"type": "list_item",
"bbox": {
"l": 34.08,
"t": 572.23,
"r": 219.12,
"b": 557.578
},
"text": "Contain a numeric character (0-9)",
"marker": "•"
},
{
"id": "p2.5.6",
"order": 11,
"type": "list_item",
"bbox": {
"l": 34.08,
"t": 556.98,
"r": 319.2,
"b": 542.16
},
"text": "Must not contain any part of the user's account name."
},
{
"id": "p2.5.7",
"order": 12,
"type": "list_item",
"bbox": {
"l": 33.36,
"t": 541.73,
"r": 328.08,
"b": 526.08
},
"text": "Cannot match any of the user's last three (3) passwords.",
"marker": "-"
}
]
},
{
"id": "p2.6",
"order": 13,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 510.24,
"r": 209.28,
"b": 497.28
},
"text": "Password Protection and Handling",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.7",
"order": 14,
"type": "text",
"bbox": {
"l": 33.84,
"t": 495.6,
"r": 577.68,
"b": 481.44
},
"text": "Users are responsible for maintaining the confidentiality of their passwords. The following protection rules apply:"
},
{
"id": "p2.8",
"order": 15,
"type": "list",
"bbox": {
"l": 33.12,
"t": 467.71,
"r": 577.44,
"b": 257.76
},
"text": "",
"attrs": {
"item_count": 7
},
"children": [
{
"id": "p2.8.1",
"order": 16,
"type": "list_item",
"bbox": {
"l": 33.6,
"t": 467.71,
"r": 502.32,
"b": 451.92
},
"text": "Passwords shall be treated as confidential information and must not be shared with anyone."
},
{
"id": "p2.8.2",
"order": 17,
"type": "list_item",
"bbox": {
"l": 33.36,
"t": 437.94,
"r": 458.4,
"b": 421.92
},
"text": "Passwords must be promptly changed if they are suspected of being compromised."
},
{
"id": "p2.8.3",
"order": 18,
"type": "list_item",
"bbox": {
"l": 33.6,
"t": 407.94,
"r": 577.44,
"b": 377.52
},
"text": "Passwords must not be written down or stored in an insecure manner (e.g., taped to a monitor). If a password must be stored, an encrypted password manager must be used."
},
{
"id": "p2.8.4",
"order": 19,
"type": "list_item",
"bbox": {
"l": 33.36,
"t": 363.41,
"r": 301.44,
"b": 348.24
},
"text": "Passwords should not be emailed with usernames."
},
{
"id": "p2.8.5",
"order": 20,
"type": "list_item",
"bbox": {
"l": 33.36,
"t": 333.41,
"r": 568.08,
"b": 317.76
},
"text": "Users must not save passwords in web browsers or use the \"remember password\" feature in applications."
},
{
"id": "p2.8.6",
"order": 21,
"type": "list_item",
"bbox": {
"l": 33.12,
"t": 303.41,
"r": 384.96,
"b": 287.52
},
"text": "Users should not use their KSU password for any non-KSU accounts."
},
{
"id": "p2.8.7",
"order": 22,
"type": "list_item",
"bbox": {
"l": 33.36,
"t": 273.39,
"r": 344.88,
"b": 257.76
},
"text": "The KSU IT department will never ask for a user's password."
}
]
},
{
"id": "p2.9",
"order": 23,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 241.68,
"r": 161.04,
"b": 228.48
},
"text": "System Security Controls",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.10",
"order": 24,
"type": "list",
"bbox": {
"l": 33.36,
"t": 214.13,
"r": 578.16,
"b": 153.84
},
"text": "",
"attrs": {
"item_count": 2
},
"children": [
{
"id": "p2.10.1",
"order": 25,
"type": "list_item",
"bbox": {
"l": 33.36,
"t": 214.13,
"r": 424.8,
"b": 198.48
},
"text": "After three (3) failed password attempts, a user's account will be locked out.",
"marker": "•"
},
{
"id": "p2.10.2",
"order": 26,
"type": "list_item",
"bbox": {
"l": 33.84,
"t": 184.36,
"r": 578.16,
"b": 153.84
},
"text": "Password-protected screen savers are mandatory on all university-owned computers and must be set to a maximum timeout of fifteen (15) minutes."
}
]
},
{
"id": "p2.11",
"order": 27,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 138.24,
"r": 197.52,
"b": 125.28
},
"text": "Frequency of Password Changes",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p2.12",
"order": 28,
"type": "text",
"bbox": {
"l": 33.6,
"t": 123.84,
"r": 577.2,
"b": 94.8
},
"text": "KSU network passwords will expire every 180 days. Users will receive a notification prompting them to change their password beginning fourteen (14) days prior to expiration."
},
{
"id": "p2.13",
"order": 29,
"type": "heading",
"bbox": {
"l": 34.08,
"t": 79.44,
"r": 169.68,
"b": 66.24
},
"text": "Password Reset Procedure",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
}
],
"excluded_furniture": {
"first": [],
"last": []
}
}
Page 3
22 item(s)
JSON
heading (4)
link (1)
list (2)
list_item (5)
table (2)
table_cell (7)
text (1)
1 · LIST
2
3
4
5 · HEADING
6 · TEXT
7 · HEADING
8 · LIST
9
10
11 · HEADING
12 · TABLE
13
14
15
16
17
18 · HEADING
19 · TABLE
20
21
22
Page 3 JSON
{
"document_id": 13957,
"page": 3,
"width_pt": 612,
"height_pt": 792,
"rotation": 0,
"pipeline_version": "paddleocr-vl-1.6+paul-48",
"engine": "paddleocr_vl",
"source_run_id": 14068,
"item_count": 22,
"counts_by_type": {
"heading": 4,
"link": 1,
"list": 2,
"list_item": 5,
"table": 2,
"table_cell": 7,
"text": 1
},
"build_ms": 7,
"items": [
{
"id": "p3.1",
"order": 1,
"type": "list",
"bbox": {
"l": 33.84,
"t": 756.03,
"r": 578.16,
"b": 607.44
},
"text": "",
"attrs": {
"item_count": 3
},
"children": [
{
"id": "p3.1.1",
"order": 2,
"type": "list_item",
"bbox": {
"l": 34.32,
"t": 756.03,
"r": 577.68,
"b": 725.76
},
"text": "Self-Service: Users may reset their own password at any time by using the password self-service system at www.kysu.edu/resettool. Users must be enrolled in the system prior to its use.",
"marker": "-"
},
{
"id": "p3.1.2",
"order": 3,
"type": "list_item",
"bbox": {
"l": 34.32,
"t": 696.78,
"r": 578.16,
"b": 651.12
},
"text": "IT Help Desk: Users may also have their password reset by contacting the IT Help Desk during business hours (8:00 AM – 4:30 PM). The user will be required to verify their identity with information such as their 8-digit KSU ID, the last four digits of their Social Security number, or by presenting a photo ID.",
"marker": "-"
},
{
"id": "p3.1.3",
"order": 4,
"type": "list_item",
"bbox": {
"l": 33.84,
"t": 637.51,
"r": 577.68,
"b": 607.44
},
"text": "Compromised Accounts: If a password has been compromised, IT will reset the password and enroll the account in multi-factor authentication.",
"marker": "•"
}
]
},
{
"id": "p3.2",
"order": 5,
"type": "heading",
"bbox": {
"l": 33.84,
"t": 590.88,
"r": 101.76,
"b": 578.4
},
"text": "Enforcement",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p3.3",
"order": 6,
"type": "text",
"bbox": {
"l": 33.36,
"t": 576.96,
"r": 577.44,
"b": 547.92
},
"text": "Any individual who violates this regulation may be subject to disciplinary action, including but not limited to termination, loss of data-access privileges, administrative sanctions, and personal civil and criminal liability."
},
{
"id": "p3.4",
"order": 7,
"type": "heading",
"bbox": {
"l": 33.6,
"t": 532.08,
"r": 267.36,
"b": 517.92
},
"text": "REFERENCES AND RELATED MATERIALS:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p3.5",
"order": 8,
"type": "list",
"bbox": {
"l": 54.025,
"t": 499.4,
"r": 213.098,
"b": 472.15
},
"text": "",
"attrs": {
"item_count": 2
},
"children": [
{
"id": "p3.5.1",
"order": 9,
"type": "list_item",
"bbox": {
"l": 54.025,
"t": 499.4,
"r": 206.893,
"b": 487.4
},
"text": "KSU Information Security Policy"
},
{
"id": "p3.5.2",
"order": 10,
"type": "list_item",
"bbox": {
"l": 54.025,
"t": 484.15,
"r": 213.098,
"b": 472.15
},
"text": "NIST Special Publication 800-63B",
"marker": "•"
}
]
},
{
"id": "p3.6",
"order": 11,
"type": "heading",
"bbox": {
"l": 34.32,
"t": 455.76,
"r": 102.24,
"b": 441.84
},
"text": "CONTACTS:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p3.7",
"order": 12,
"type": "table",
"bbox": {
"l": 34.8,
"t": 425.76,
"r": 575.52,
"b": 394.08
},
"text": "",
"attrs": {
"block_label": "table",
"n_rows": 1,
"n_cols": 4,
"integrity": {
"cells_checked": 4,
"cells_flagged": 0
}
},
"children": [
{
"id": "p3.7.1",
"order": 13,
"type": "table_cell",
"bbox": {
"l": 41.775,
"t": 422.63,
"r": 131.463,
"b": 395.38
},
"text": "Subject\nGeneral Questions",
"attrs": {
"row": 0,
"col": 0,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
},
{
"id": "p3.7.2",
"order": 14,
"type": "table_cell",
"bbox": {
"l": 190.08,
"t": 422.63,
"r": 270.708,
"b": 395.38
},
"text": "Office\nOffice of the CIO",
"attrs": {
"row": 0,
"col": 1,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
},
{
"id": "p3.7.3",
"order": 15,
"type": "table_cell",
"bbox": {
"l": 328.38,
"t": 422.63,
"r": 402.724,
"b": 395.38
},
"text": "Telephone\n(502) 597-7000",
"attrs": {
"row": 0,
"col": 2,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
},
{
"id": "p3.7.4",
"order": 16,
"type": "table_cell",
"bbox": {
"l": 439.17,
"t": 422.63,
"r": 553.914,
"b": 395.38
},
"text": "E-mail\nWendy.Dixie@kysu.edu",
"attrs": {
"row": 0,
"col": 3,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
},
"children": [
{
"id": "p3.7.4.1",
"order": 17,
"type": "link",
"bbox": {
"l": 436.65,
"t": 410.01,
"r": 555.81,
"b": 395.36
},
"text": "Wendy.Dixie@kysu.edu",
"attrs": {
"uri": "mailto:Wendy.Dixie@kysu.edu",
"action_type": "/URI",
"row": 0,
"col": 3,
"rowspan": 1,
"colspan": 1
}
}
]
}
]
},
{
"id": "p3.8",
"order": 18,
"type": "heading",
"bbox": {
"l": 34.56,
"t": 378.24,
"r": 90,
"b": 364.56
},
"text": "HISTORY:",
"attrs": {
"block_label": "paragraph_title"
},
"level": 3
},
{
"id": "p3.9",
"order": 19,
"type": "table",
"bbox": {
"l": 35.28,
"t": 348.48,
"r": 576.24,
"b": 286.8
},
"text": "",
"attrs": {
"block_label": "table",
"n_rows": 1,
"n_cols": 3,
"integrity": {
"cells_checked": 3,
"cells_flagged": 0
}
},
"children": [
{
"id": "p3.9.1",
"order": 20,
"type": "table_cell",
"bbox": {
"l": 41.775,
"t": 345.35,
"r": 199.311,
"b": 288.1
},
"text": "Revision Type\nIssued (New Policy)\nSubstantive Revisions\nMinor Revisions (New Template)",
"attrs": {
"row": 0,
"col": 0,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
},
{
"id": "p3.9.2",
"order": 21,
"type": "table_cell",
"bbox": {
"l": 284.63,
"t": 345.35,
"r": 409.838,
"b": 288.1
},
"text": "Date of Issuance/Revision\nMay 2020\nDecember 18, 2023\nJune 2025",
"attrs": {
"row": 0,
"col": 1,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
},
{
"id": "p3.9.3",
"order": 22,
"type": "table_cell",
"bbox": {
"l": 424.17,
"t": 345.35,
"r": 565.086,
"b": 288.1
},
"text": "Drafter(s)/Editor(s)\nUnknown\nWendy Dixie and Zach Atwell\nWendy Dixie and Zach Atwell",
"attrs": {
"row": 0,
"col": 2,
"rowspan": 1,
"colspan": 1,
"bbox_refit": true,
"merged_continuation": true,
"column_header": true,
"header_source": "pdf"
}
}
]
}
],
"excluded_furniture": {
"first": [],
"last": []
}
}