Vendor and System Administrator - Password Change Information
Vendor and system administrator accounts follow the same guidelines defined for STARS, MVS/WIUP and other systems with the following exceptions:
- Vendor accounts must only be enabled during a maintenance window and with proper and approved change control.
- All administrative-level passwords (e.g., root, enable, NT admin, application administrative accounts, database administrative accounts, etc.) must be changed every 60 days. Areas may choose to change passwords more often but never less.