{"id":21656,"date":"2020-02-13T20:48:49","date_gmt":"2020-02-13T20:48:49","guid":{"rendered":"https:\/\/www.process.st\/templates\/enterprise-password-management-checklist-template\/"},"modified":"2024-05-16T06:52:50","modified_gmt":"2024-05-16T06:52:50","slug":"enterprise-password-management-checklist-template","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/enterprise-password-management-checklist-template\/","title":{"rendered":"Enterprise Password Management Checklist Template"},"content":{"rendered":"\n<section id=\"introduction\">\n <h2>Introduction:<\/h2>\n <div class=\"image-content\">\n  <figure>\n   <a href=\"https:\/\/ps-attachments.s3.amazonaws.com\/5c0efb09-66f5-4d3d-b008-b628caadae28\/iFS0UB0VcqJQoh53OzpOdw.png\" alt=\"Introduction:\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/ps-attachments.s3.amazonaws.com\/5c0efb09-66f5-4d3d-b008-b628caadae28\/iFS0UB0VcqJQoh53OzpOdw.png\"> <\/a><!-- No caption -->\n  <\/figure>\n <\/div>\n <div class=\"text-content\">\n  <p>Lack of password protection remains a permeating problem among enterprises. Although the risks may seem obvious, users continue to choose easy-to-guess passwords, reuse passwords, and even email them to friends or colleagues.&nbsp;<\/p>\n  <p>Unfortunately, many enterprises continue to use outdated <a href=\"https:\/\/www.process.st\/enable-two-factor-authentication\/\" rel=\"nofollow noopener\" target=\"_blank\">password authentication<\/a> simply because it may be easier and less expensive to use than more up-to-date secure systems. This combined with a user-base that may be ignorant to password-relate risks is a recipe for <a href=\"https:\/\/www.process.st\/it-processes\/\" rel=\"nofollow noopener\" target=\"_blank\">disaster<\/a>.<\/p>\n  <p>This is why it's important for your enterprise to regularly review and update your password management policy, to protect your sensitive information and a secure environment for your employees and users.<\/p>\n  <p>This enterprise password management checklist template makes it easy for you. It provides a simple process that you can run to stay on top of password management and repeat however often you might want to for the best protection.<\/p>\n  <p>Running this checklist <a href=\"https:\/\/www.process.st\/case-study-techmd\/\" rel=\"nofollow noopener\" target=\"_blank\">regularly<\/a> allows you to protect your sensitive data from any potential threats and be prepared with a backup if the worst were to happen. Although it's not possible to be able to avoid every possible issue that may come up, there are definitely many ways you could protect your enterprise from some of the most widespread threats out there.<\/p>\n <\/div>\n<\/section>\n<section id=\"choosing-passwords\">\n <h2>Choosing passwords:<\/h2>\n<\/section>\n<section id=\"keep-passwords-private\">\n <h2>Keep passwords private<\/h2>\n <div class=\"text-content\">\n  <p>Your first step is to make sure to <strong>keep all of your <a href=\"https:\/\/www.process.st\/checklist\/privileged-password-management\/\" rel=\"nofollow noopener\" target=\"_blank\">passwords<\/a> private<\/strong>.&nbsp;<\/p>\n  <p>Don't share them with anyone, don't send them to friends or colleagues&nbsp;electronically (unless they're encrypted), and don't write them down.<\/p>\n <\/div>\n<\/section>\n<section id=\"avoid-using-personal-information\">\n <h2>Avoid using personal information<\/h2>\n <div class=\"text-content\">\n  <p>When choosing a password, <strong>avoid using any personal information<\/strong> that may be easy for someone to find.&nbsp;<\/p>\n  <p>For example, first or last names, birthdays or birth years, anniversaries, nicknames, addresses or anything else that maybe personal.<\/p>\n <\/div>\n<\/section>\n<section id=\"create-difficult-to-guess-passwords\">\n <h2>Create difficult to guess passwords<\/h2>\n <div class=\"text-content\">\n  <p><strong>Avoid creating a password that could be easy to guess.<\/strong><\/p>\n  <p>Don't use common words, abbreviations, or even things like words spelled backwards.<\/p>\n <\/div>\n<\/section>\n<section id=\"use-mixed-characters\">\n <h2>Use mixed characters<\/h2>\n <div class=\"text-content\">\n  <p>Make sure to<strong> incorporate both lower and uppercase letters, numbers, and symbols<\/strong> such as @, %, !, &amp;, and ^ into your passwords to make them as strong as possible.<\/p>\n <\/div>\n<\/section>\n<section id=\"create-lengthy-passwords\">\n <h2>Create lengthy passwords<\/h2>\n <div class=\"text-content\">\n  <p><strong>Don't use a short password<\/strong>; these are easier to breach. Instead make your password 8-20 characters long.<\/p>\n <\/div>\n<\/section>\n<section id=\"change-passwords-often\">\n <h2>Change passwords often<\/h2>\n <div class=\"text-content\">\n  <p>Remember to <strong>change your passwords regularly<\/strong>.<\/p>\n  <p>For normal user accounts, it's recommended to change their passwords about <strong>every 90 days<\/strong>, but administrative accounts should change their passwords even more often than that.<\/p>\n <\/div>\n<\/section>\n<section id=\"use-a-different-password-every-time\">\n <h2>Use a different password every time<\/h2>\n <div class=\"text-content\">\n  <p>When you are in the habit of changing your passwords regularly, <strong>make sure each password is very different from your previous passwords<\/strong> and not just a slight variation; otherwise it won't be as effective.<\/p>\n <\/div>\n<\/section>\n<section id=\"password-management\">\n <h2>Password management:<\/h2>\n<\/section>\n<section id=\"educate-users-on-password-related-risks\">\n <h2>Educate users on password related risks<\/h2>\n <div class=\"text-content\">\n  <p>Now that you have a better grasp of how to avoid password related risks, you should <strong>educate your user base<\/strong> about these potential <strong>password related issues<\/strong> and how to create a strong, protected password.<\/p>\n <\/div>\n<\/section>\n<section id=\"prevent-users-from-creating-weak-passwords\">\n <h2>Prevent users from creating weak passwords<\/h2>\n <div class=\"text-content\">\n  <p>One way on enforcing stronger password protection for your users could be to prevent them from creating weak passwords to begin with through <strong><a href=\"https:\/\/www.process.st\/checklist\/network-security-audit-checklist\/\" rel=\"nofollow noopener\" target=\"_blank\">security<\/a> policies<\/strong>.<\/p>\n <\/div>\n<\/section>\n<section id=\"set-to-passwords-to-expire-at-preset-intervals\">\n <h2>Set to passwords to expire at preset intervals<\/h2>\n <div class=\"text-content\">\n  <p>Another way to practice better password management could be to <strong>set your users' passwords to expire at preset intervals<\/strong>, so that they're forced to regularly change their passwords.<\/p>\n <\/div>\n<\/section>\n<section id=\"retain-password-history-to-avoid-repeats\">\n <h2>Retain password history to avoid repeats<\/h2>\n <div class=\"text-content\">\n  <p>Next, you could<strong> retain your users' password histories<\/strong> to prevent them from reusing passwords when they're changing them at your preset intervals.<\/p>\n <\/div>\n<\/section>\n<section id=\"set-limit-for-number-of-times-an-incorrect-password-can-be-inputted-account-is-locked\">\n <h2>Set limit for number of times an incorrect password can be inputted account is locked<\/h2>\n <div class=\"text-content\">\n  <p>Set your controls to <strong>limit the number of times an incorrect password can be inputted<\/strong> before an account is locked out to stop fraudulent log-in attempts in their tracks.<\/p>\n <\/div>\n<\/section>\n<section id=\"audit-passwords-regularly\">\n <h2>Audit passwords regularly<\/h2>\n <div class=\"text-content\">\n  <p>Make sure your passwords are being <strong>audited<\/strong> regularly to make sure they're all up to standard.&nbsp;<\/p>\n  <p>During the auditing process, ensure that all passwords remain confidential.<\/p>\n <\/div>\n<\/section>\n<section id=\"encrypt-stored-passwords\">\n <h2>Encrypt stored passwords<\/h2>\n <div class=\"text-content\">\n  <p>If you haven't already, make sure all of your stored passwords are kept <strong>encrypted<\/strong> and protected on a secured system.<\/p>\n <\/div>\n<\/section>\n<section id=\"approval-final-approval-manager\">\n <h2>Approval: Final approval (Manager)<\/h2>\n <div class=\"approval-content\">\n  <div class=\"header\">\n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div>\n  <\/div>\n  <div class=\"approval-rule-subject-tasks-list\">\n   <ul class=\"list\">\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Keep passwords private<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Avoid using personal information<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Create difficult to guess passwords<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Use mixed characters<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Create lengthy passwords<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Change passwords often<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Use a different password every time <\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Educate users on password related risks<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Prevent users from creating weak passwords<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Set to passwords to expire at preset intervals<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Retain password history to avoid repeats<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Set limit for number of times an incorrect password can be inputted account is locked<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Audit passwords regularly<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n    <li>\n     <div class=\"approval-rule-subject-tasks-list-item\">\n      <div class=\"item\">\n       <div class=\"container\">\n        <span class=\"title\">Encrypt stored passwords<\/span>\n        <div class=\"body\">\n         Will be submitted\n        <\/div>\n       <\/div>\n      <\/div>\n     <\/div><\/li>\n   <\/ul>\n  <\/div>\n <\/div>\n<\/section>\n<section id=\"sources\">\n <h2>Sources:<\/h2>\n <div class=\"text-content\">\n  <ul>\n   <li><a href=\"https:\/\/searchenterprisedesktop.techtarget.com\/\" rel=\"nofollow noopener\" target=\"_blank\">searchenterprisedesktop<\/a> - <a href=\"https:\/\/searchenterprisedesktop.techtarget.com\/tip\/Enterprise-password-protection-checklist\" rel=\"nofollow noopener\" target=\"_blank\">Enterprise password protection checklist<\/a><\/li>\n   <li><a href=\"https:\/\/www.cmu.edu\/\" rel=\"nofollow noopener\" target=\"_blank\">cmu<\/a> - <a href=\"https:\/\/www.cmu.edu\/iso\/governance\/guidelines\/password-management.html\" rel=\"nofollow noopener\" target=\"_blank\">Guidelines for Password Management<\/a><\/li>\n   <li><a href=\"https:\/\/thycotic.com\/\" rel=\"nofollow noopener\" target=\"_blank\">thycotic<\/a> - <a href=\"https:\/\/thycotic.com\/company\/blog\/2019\/01\/01\/future-of-passwords-enterprise\/\" rel=\"nofollow noopener\" target=\"_blank\">Password Management Practices in the Enterprise and the Future of Passwords<\/a><\/li>\n   <li><a href=\"https:\/\/www.vxchnge.com\/\" rel=\"nofollow noopener\" target=\"_blank\">vxchnge<\/a> - <a href=\"https:\/\/www.vxchnge.com\/blog\/enterprise-password-management\" rel=\"nofollow noopener\" target=\"_blank\">[Guide] How To Choose the Best Enterprise Password Management Solution<\/a><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n<section id=\"related-checklists\">\n <h2>Related checklists:<\/h2>\n <div class=\"text-content\">\n  <ul>\n   <li><a href=\"https:\/\/process.st\/checklist\/invoice-approval-workflow-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Invoice Approval Workflow Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/blog-content-approval-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Blog Content Approval Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/graphic-design-approval-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Graphic Design Approval Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/wordpress-security-audit-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">WordPress Security Audit Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/video-content-approval-workflow-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Video Content Approval Workflow Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/information-security-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Information Security Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/application-security-audit-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Application Security Audit Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/content-marketing-workflow-management-checklist-template\" rel=\"nofollow noopener\" target=\"_blank\">Content Marketing Workflow Management Checklist Template<\/a><\/li>\n   <li><a href=\"https:\/\/process.st\/checklist\/enterprise-video-content-management-checklist\" rel=\"nofollow noopener\" target=\"_blank\">Enterprise Video Content Management Checklist<\/a><\/li>\n  <\/ul>\n <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Introduction: Lack of password protection remains a permeating problem among enterprises. Although the risks may seem obvious, users continue to choose easy-to-guess passwords, reuse passwords, and even email them to friends or colleagues.&nbsp; Unfortunately, many enterprises continue to use outdated password authentication simply because it may be easier and less expensive to use than more [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":21657,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"\ud83d\udd10","cover_icon_url":"","tasks_count":"20","template_description":"Run this checklist whenever you need to strengthen enterprise password management.","template_id":"qCy3uAtnyGZAjgmIPW5Lkg","task_0":"Introduction:","task_slug_0":"introduction","task_1":"Choosing passwords:","task_slug_1":"choosing-passwords","task_2":"Keep passwords private","task_slug_2":"keep-passwords-private","task_3":"Avoid using personal information","task_slug_3":"avoid-using-personal-information","task_4":"Create difficult to guess passwords","task_slug_4":"create-difficult-to-guess-passwords","task_5":"Use mixed characters","task_slug_5":"use-mixed-characters","task_6":"Create lengthy passwords","task_slug_6":"create-lengthy-passwords","task_7":"Change passwords often","task_slug_7":"change-passwords-often","task_8":"Use a different password every time  ","task_slug_8":"use-a-different-password-every-time","task_9":"Password management:","task_slug_9":"password-management","task_10":"Educate users on password related risks","task_slug_10":"educate-users-on-password-related-risks","task_11":"Prevent users from creating weak passwords","task_slug_11":"prevent-users-from-creating-weak-passwords","task_12":"Set to passwords to expire at preset intervals","task_slug_12":"set-to-passwords-to-expire-at-preset-intervals","task_13":"Retain password history to avoid repeats","task_slug_13":"retain-password-history-to-avoid-repeats","task_14":"Set limit for number of times an incorrect password can be inputted account is locked","task_slug_14":"set-limit-for-number-of-times-an-incorrect-password-can-be-inputted-account-is-locked","task_15":"Audit passwords regularly","task_slug_15":"audit-passwords-regularly","task_16":"Encrypt stored passwords","task_slug_16":"encrypt-stored-passwords","task_17":"Approval: Final approval (Manager)","task_slug_17":"approval-final-approval-manager","task_18":"Sources:","task_slug_18":"sources","task_19":"Related checklists:","task_slug_19":"related-checklists","task_20":"","task_slug_20":"","task_21":"","task_slug_21":"","task_22":"","task_slug_22":"","task_23":"","task_slug_23":"","task_24":"","task_slug_24":"","task_25":"","task_slug_25":"","task_26":"","task_slug_26":"","task_27":"","task_slug_27":"","task_28":"","task_slug_28":"","task_29":"","task_slug_29":"","task_30":"","task_slug_30":"","task_31":"","task_slug_31":"","task_32":"","task_slug_32":"","task_33":"","task_slug_33":"","task_34":"","task_slug_34":"","task_35":"","task_slug_35":"","task_36":"","task_slug_36":"","task_37":"","task_slug_37":"","task_38":"","task_slug_38":"","task_39":"","task_slug_39":"","task_40":"","task_slug_40":"","task_41":"","task_slug_41":"","task_42":"","task_slug_42":"","task_43":"","task_slug_43":"","task_44":"","task_slug_44":"","task_45":"","task_slug_45":"","task_46":"","task_slug_46":"","task_47":"","task_slug_47":"","task_48":"","task_slug_48":"","task_49":"","task_slug_49":"","task_50":"","task_slug_50":"","task_51":"","task_slug_51":"","task_52":"","task_slug_52":"","task_53":"","task_slug_53":"","task_54":"","task_slug_54":"","task_55":"","task_slug_55":"","task_56":"","task_slug_56":"","task_57":"","task_slug_57":"","task_58":"","task_slug_58":"","task_59":"","task_slug_59":"","task_60":"","task_slug_60":"","task_61":"","task_slug_61":"","task_62":"","task_slug_62":"","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[60,61,57],"tags":[],"class_list":["post-21656","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-creative-workflow-management","category-enterprise","category-information-security"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/21656","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=21656"}],"version-history":[{"count":0,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/21656\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media\/21657"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=21656"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=21656"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=21656"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}