《万豪酒店IT部p&p Computer User Password and Email Control.doc》由会员分享，可在线阅读，更多相关《万豪酒店IT部p&p Computer User Password and Email Control.doc（3页珍藏版）》请在三一文库上搜索。
1、STANDARD OPERATING PROCEDURES标准操作程序Subject 主题: User Password and Email Control 帐户密码和邮件控制Policy No 编号: FIN 123 Effective Date 有效日期: 1st August 2007Issued by 签发:Finance Controller财务总监 Approved by 批准: General Manager总经理Signature 签名： Signature 签名：Purpose 目的For security purpose, computer system, either b
2、ack office or front office, must be strictly controlled and limited to the access for only authorized person with delegated privileges and rights according to the assigned duties.为保证安全，无论后台或前台部门的电脑系统都必须进行严格控制，仅限授权人使用，即按工作性质享有特权的工作人员。Policy & Procedure 政策和程序Procedure程序: 1. Employee types will be segr
3、egated according to different positions/duties and will be configured by the IT Manager with the advice of the computer trainer during the installation of the system, and subject to the review by the Director of Finance & Business. The final configuration will be documented.员工将按不同的职位/分工分成不同的类别，并由电脑房
4、经理结合系统工程师的建议，在安装系统时进行设置。该设置要经财务总监审核，最终设置结果将存档备案。2. After the establishment of the employee types in the system, a pre-printed user request form designed by the IT Manager will be distributed to the concerned Department Heads. Each application request will be subject to proper approval by the Directo
5、r of Finance & Business Support.当员工类别在系统中建立后，由电脑部经理将已印制好的用户申请表格发放有关部门经理。所有用户申请表需经财务总监批准。3. On each request for user, the application form must be filled in and specified with the employee type, then approved by the Department Head. The duly approved request will be forwarded to the IT Manager for bu
6、ilding account for the requested user, ONE sheet per one applicable program only.在每张用户申请表上必须标明员工类别，并经部门经理批准。批准后的申请表交电脑房经理建立用户帐号。一个应用程序填写一张表。4.IT Support Manager will create the ID and initial password according the form. The user should change the password after they get the initial password.电脑部经理将依
7、据申请单建立用户的登录名称和初始密码，在用户拿到初始密码后应在登录时对初始密码进行更改。5. In case of termination, it is the responsibility of the concerned Department Head to notify the IT department immediately at the moment when the notice take into effect. The IT Manager must disable all the right for the terminated user with immediate ac
8、tion in order to avoid willful damage to the hotel system.如要终止用户，由部门经理负责在用户终止生效时及时通知电脑房经理。电脑房经理应立即取消该用户的所有权利以避免酒店系统的不必要损失。Password Administration密码管理1. Password must according to following rule:密码的设置必须遵照以下规则：(1) A password must be at least six characters in length. (Longer is generally better.) 密码至少
9、由6位字符组成（大于6位更好）(2) It is best if passwords contain at least one alphabetic and one numeric character, in mixed case (at least one upper case).密码应该由字母和数字混合组成，其中至少要包含一个字母和一个数字（至少有一个是大写字母）。(3) It must be different from previous passwords.密码应该不同于以前所设定的密码。(4) It cannot be the same as the user ID.密码应该不同于用
10、户的代码。(5) It cannot include the first, middle or last name of the person issued the user ID.密码不应该包含用户的姓氏，或用户的名字。(6) It should not contain information easily obtainable about you. This includes license plate, social security, telephone numbers, or street address.密码不应包含容易被人猜出的有关用户本人的信息，这包括牌照，社会保险号码，电话号
11、码或住址的门牌号码等等。(7) Passwords should never be communicated in clear text emails or other forms of electronic communications.密码不能通过电子邮件方式或任何其他的电子通信方式进行明文传递。3. While password changes can be more often, they should occur whenever there is a belief that the password has been compromised. All passwords for n
12、ewly activated user IDs must be changed at first use. Automatic expiration timeframes may be implemented on specific systems to force user changes passwords every 3 months.无论何时如果发现密码变得不安全，应随时进行更改，密码的更改也可以经常进行。第一次分配到密码的用户必须对初始密码进行修改。在指定的系统中设置密码有效期限，强制用户每三个月对自己的密码进行修改。4. It is not advisable to write p
13、asswords down or store them near the computer or other device.不建议将密码写在纸上或将密码保存在电脑或其它设备中。5. Department Heads should brief their employees not to disclose their own password to any other party and they have to bear all consequences for doing so.部门经理应对对员工简述密码安全的重要性。员工除管理需要外，在任何情况下，都应谨记，不得向任何第三方透露密码。此外，应提醒员工随时更改自己的密码，加强安全。- 3 -