KENTUCKY STATE UNIVERSITY POLICIES AND PROCEDURES

POLICY TITLE: IT Password Policy

VOLUME, SECTION & NUMBER: 4.2.11

ENTITIES AFFECTED: Students Faculty Staff Individuals Using KSU Technology Services or Resources

ADMINISTRATIVE AUTHORITY: Information Technology Department of Finance & Business Affairs

APPROVED BY: Kentucky State University Board of Regents

EFFECTIVE DATE: December 18, 2023

REVISED FROM: May 2020 Version of Policy

POLICY STATEMENT:

The purpose of this policy is to establish minimum requirements for the creation of passwords, the protection of passwords, the resetting of passwords, and the frequency of changing passwords. The intent of this policy is to ensure the appropriate protection and safeguarding of Kentucky State University's Information Technology (IT) resources and systems from unauthorized access and misuse.

PROCEDURES:

Passwords are one essential piece of computer security. Passwords (single authentication) or two-factor authentications (password and token) must be used to authenticate access into any system or application that contains confidential or restricted information.