The purpose of this policy is to establish guidelines for creating and managing strong passwords to ensure the security of KIVO BPO’s systems and data.

Scope
This policy applies to all employees, contractors, and third-party vendors who have access to KIVO BPO’s systems and data.

Policy
Passwords must meet the following requirements:

• Complexity
  Passwords must be at least 8 characters long and contain a mix of uppercase and lowercase letters, numbers, and special characters.

• Frequency
  Passwords must be changed at least every 90 days, and users are prohibited from using their last 5 passwords.

• Lockout
  Accounts are locked out after 5 failed login attempts and can only be unlocked by contacting our IT department.

• Storage
  Passwords are stored in a secure, encrypted format to prevent unauthorized access.

• Sharing
  Passwords must not be shared with anyone, including other employees, contractors, or third-party vendors.

• Two-factor authentication
  Where possible, we encourage the use of two-factor authentication to further enhance the security of our systems and data.

• Education
  We provide regular training and education to our employees on best practices for creating and managing strong passwords.

Enforcement
Any employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.

Review
This policy will be reviewed and updated as necessary to ensure that it remains effective and aligned with KIVO BPO’s data protection objectives and controls.

Contact
If you have any questions or concerns about this password policy, please contact us at [email protected].