Re: Password Standards

["Shamblin, Quinn" <qrs () BU EDU>]

Ours are part of our overall data protection standards (http://www.bu.edu/infosec/policies/data-protection-standards/)  
Auth requirements are here: 
http://www.bu.edu/tech/about/policies/info-security/1-2-c-access-management-and-authentication-requirements/ 

Quinn R Shamblin                                                  .
Executive Director of Information Security, Boston University


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Mally 
Mclane
Sent: Wednesday, September 03, 2014 8:14 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Password Standards

http://www.bristol.ac.uk/it-services/advice/iam/usernamesandpasswords.html#passwordrules

On 2 September 2014 21:42, Ken Connelly <Ken.Connelly () uni edu> wrote:
> https://www.uni.edu/its/kb/8354
>
> On 9/2/14 3:35 PM, Russo, Dan wrote:
> > Hello –
> >
> >
> >
> > If anyone has the time, and is willing to share what they use for 
> > password standards?
> >
> >
> >
> > Specifically
> >
> >
> >
> > Password Length
> >
> > Password History
> >
> > Password Expiration (if any)
> >
> > Password Age
> >
> >
> >
> >
> >
> > Thanks !
>
> --
> - Ken
> =================================================================
> Ken Connelly             Associate Director, Security and Systems
> ITS Network Services                  University of Northern Iowa
> email: Ken.Connelly () uni edu   p: (319) 273-5850 f: (319) 273-7373
>
> Any request to divulge your UNI password via e-mail is fraudulent!



--
Mally Mclane
Communication and Collaboration Services Manager University of Bristol