KSU configure their Network and Banner to require passwords to be changed prior to first use.

The Network, Banner, and ADP require passwords to be changed at least every 60 days for all privileged accounts and every 90 days for all non-privileged accounts.

Banner passwords be required to contain both alphanumeric and special characters. The password history for both Banner and ADP should be increased to 24 passwords.

KSU document the naming convention of Banner and ADP user IDs within a written policy. KSU should then regularly monitor user IDs established within Banner and ADP to ensure these adhere to the naming convention established within this policy.