March 30, 2004
To: UCOP Personnel
From: Patrick Collins, Director, IR&C Information and Communication
Services
IR&C is currently reviewing and strengthening IT security measures
at UCOP. You can support this effort by choosing strong passwords
for e-mail, electronic calendars, file servers, and other accounts.
Passwords play an essential role in protecting the UCOP network and
the information on our computers. Attackers use sophisticated software
to try to guess passwords so as to break into computer systems. After
breaking into one account or system, it is then much easier for the
intruder to access other systems on the same network. To address these
concerns, IR&C has established new minimum requirements for passwords.
We would like to ask all UCOP employees to re-evaluate their current
passwords and change them, if necessary, to conform to the minimum
requirements. Over the next few weeks, IR&C will develop specific
standards for passwords on different systems and begin enforcing these
requirements using a variety of methods.
Minimum Password Requirements
--Immediately change any new or default password assigned
to you.
--Choose passwords at least 6 characters in length with a mix of numbers
and upper and lower case letters.
--Avoid words found in any dictionary and in any language, whether
spelled forwards or backwards.
--Avoid names of people or places, or information about you that may
be well known or easy to find, such as your address, birthday, or
hobbies.
--Avoid common keyboard sequences, such as "qwerty89" or "abc123."
--Do not share your personal passwords with anyone.
Instructions for Changing Passwords
Instructions for changing passwords for some commonly used
systems are provided below. If you need assistance with changing passwords
for other systems, please contact your departmental PC Coordinator.
Eudora : From the "Special" menu select
"Change Password" and follow the directions.
Corporate Time : From the "Options" menu
select "Change Password" and follow the directions.
Windows : Press CTL-ALT-DEL, click "Change
Password," and follow the directions.
Thank you for your cooperation and assistance. We will continue to
keep you informed about our efforts to enhance IT security at UCOP.
Please direct any questions or concerns to IR&C Desktop Computing
Services at pchelp@ucop.edu or 987-0457.
