HOT
Thursday, May 22 2025
Lorem ipsum dolor sit amet, consectetur adipiscing elit.
Written by January 21, 2024

Server Access and Authentication Policy

IT Policy Article

EDC Inc Server Access and Authentication Policy

This policy outlines the guidelines and procedures for accessing and authenticating servers at EDC Inc. It is designed to protect the integrity, confidentiality, and availability of EDC Inc’s information assets.

Scope

This policy applies to all EDC Inc employees, contractors, consultants, and other workers who interact with EDC Inc’s servers, including but not limited to IT Server Operations, IT Server Build Operations, IT-SOC, Corporate Physical Security, IT Security Operations, IT Monitoring Operations, IT Database Operations, and IT Audit and Compliance.

Policy

Server Access

Read moreData Protection and Privacy Policy

Access to EDC Inc’s servers is restricted to authorized personnel only. Authorization is granted by the IT Director of the respective department, based on the user’s job responsibilities and the principle of least privilege. All server access must be documented in the CMDB inventory management tool.

Authentication

Authentication to EDC Inc’s servers is managed through Active Directory. Users must provide valid credentials (username and password) to gain access. Passwords must meet EDC Inc’s password complexity requirements and must be changed every 90 days.

Service Accounts

Read moreNetwork Security Policy

Service accounts are used for running system services and applications. These accounts are managed by IT Server Operations and must be documented in the CMDB inventory management tool. Passwords for service accounts must be stored securely and changed every 180 days or whenever there is a change in personnel with knowledge of the password.

Change Management

Any changes to server access or authentication settings must be approved by the CAB (Change Audit Board). The change request must include a detailed description of the change, the reason for the change, and the potential impact of the change. The CAB will review the change request and approve or deny it based on the potential risk to EDC Inc’s information assets.

Server Patching

Read moreAccess Control Policy

Server patching is managed by IT Server Operations. Each server must be patched every 30 days, unless an IT Exception is approved by IT Security. All patches must be tested in a non-production environment before being applied to production servers. The patching process must be documented and reviewed by IT Audit and Compliance.

Enforcement

Any employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment. Any contractor, consultant, or other worker found to have violated this policy may have their contract with EDC Inc terminated.

Contact

Read moreIncident Response and Management Policy

For any questions or concerns about this policy, please contact the IT Director of your respective department.

Summary

This Server Access and Authentication Policy provides a framework for managing access to EDC Inc’s servers and ensuring the security of EDC Inc’s information assets. By adhering to this policy, EDC Inc can reduce the risk of unauthorized access, data breaches, and other security incidents. It is the responsibility of all EDC Inc employees, contractors, consultants, and other workers to comply with this policy and to report any suspected violations to their respective IT Director.

You may also like

Team Department Details

Links and Services

Contact Information for Customers who need support.

102 comments

Leave a Reply to 3phase-motor.com Cancel reply

Your email address will not be published. Required fields are marked *