Article 12 Password control

All passwords shall be kept safely and treated confidentially. In case of suspicion that a password has been disclosed, the password has to be changed immediately or the user account has to be disabled. Unique and individual user identities shall be used.

Procedures shall be defined in the Security Policy for logging in and out to prevent any unauthorised access.