AUE2602 EXAM PACKLATEST.

TABLE OF CONTENTS  NOVEMBER 2018  MAY/JUNE 2018  MAY/JUNE 2017  NOVEMBER 2017  NOVEMBER 2016  NOVEMBER 2014  MAY/JUNE 2015  NOVEMBER 2015 Downloaded by: overcomerstutorials | OCTOBER/NOVEMBER 2018 1.5) Password controls  Passwords should be unique to each individual (group passwords should not be used).  Passwords should consist of at least six characters, be random not obvious, and a mix of letters, numbers, upper/lower case and symbols.  Passwords/user-IDs for terminated or transferred personnel should be removed/disabled at the time of termination or transfer.  Passwords should be changed regularly and users should be forced by the system, to change their password (system sends the user a screen message to change his password and allows a limited number of attempts to enter his existing password. After this, access will not be granted until a new password has been registered).  The first time a new employee accesses the system, he should be prompted to change his initial password.  Passwords should not be displayed on PCs at any time, be printed on any reports or logged in transaction logs.  Password files should be subject to strict access controls to protect them from unauthorised read and write access. Encryption of password files is essential.  Personnel should be prohibited from disclosing their passwords to others and subjected to disciplinary measures should they do so.  Passwords should be changed if confidentiality has been violated, or violation is expected.  Passwords should not be obvious, e.g. birthdays, names, name backwards, common words, and should not be the same as the user. 2.1) Definition Document A Sales invoice