Data security standards

• Identify all users with a unique username (do not use group, shared or generic accounts & passwords)
• Passwords must have a minimum length of at least 7 characters
• Use passwords containing both numeric and alphabetic characters
• Passwords must be changed every 90 days
• Previously used passwords may not be reused
• Limit repeated access attempts by locking out the user ID after not more than 6 attempts

• If a session has been idle for more than 15 minutes, require the user to re-enter the password to reactivate the terminal
• If a user has not logged in for more than 90 days that user account is made inactive

• Do not store credit card data within TourCMS