Audit Recommendations

January 21, 2004
In the annual Management Letter sent from Baylor's external auditors Deloitte & Touche, the following was recommended in an observation about the importance of forced periodic password changes, limited unsuccessful login attempts, and prevention of unauthorized use of desktop machines left unattended.
"Timeouts or screen saver passwords should be implemented on Windows ... to protect information access when end-users leave their desks without logging out of the systems."

ITS therefore agreed to work towards implementing screen saver utilization with password protection in campus offices with access to university information resources.

To configure your computer with password protection click on Start>Settings (if running Windows XP there will not be a settings)>Control Panel>Display. On the screen savers tab, select a screen saver that you like and the amount of minutes before the screen saver kicks in. Then make sure to place a check mark in the box next to "On resume, password protect". Click on Apply, and then click on Ok. Now when you leave your desk with the computer running, the screen saver will come on when the time limit has lapsed. When you come back, you will be prompted for your password.

Another way to password protect your computer is to lock it down before you step away. Just click on Control+Alt+Delete and choose Lock computer. When you come back you will be prompted for a password.

Either way is effective, but the first option is the recommended way of protecting your computer. It is a one time setting that will activate when your computer is not in use. The second option is something you will have to remember to do each time you leave.

For more help or questions please contact the helpdesk at 4357.
Are you looking for more news?