87

Recommendations

We recommend:

• KSU configure their Network and Banner to require passwords to be changed prior to first use.
• The Network, Banner, and ADP require passwords to be changed at least every 60 days for all privileged accounts and every 90 days for all non-privileged accounts.
• Banner passwords be required to contain both alphanumeric and special characters. The password history for both Banner and ADP should be increased to 24 passwords.
• KSU document the naming convention of Banner and ADP user IDs within a written policy. KSU should then regularly monitor user IDs established within Banner and ADP to ensure these adhere to the naming convention established within this policy.