Processes: Information Security

Workflow for managing account lockouts triggered by repeated invalid login attempts and subsequent reactivation as defined in REQ-0300208. Covers automatic lockout thresholds, manual unlock by system administrators after identity verification, and automatic unlock after defined time periods.

Annual review of end-user and IT technical personnel access rights to evaluate appropriateness of user roles, training completion, and account activity within computerized systems. Conducted per SOP-0109167, with review frequency defined in the Operational Support Plan or approved document.

Workflow for managing password escrow under specific circumstances as defined in REQ-0300208. Requires a documented rationale, a governing SOP, sealed physical storage, logged access, and regular password rotation per the password management standard.

Workflow for handling initial passwords, forgotten passwords, and password changes as defined in REQ-0300208. Ensures identity verification before any password reset, generation of unique random initial passwords, and secure distribution to the account owner.