|
|
Security Changes to LLIS.gov
As part of the Department of Homeland Security's (DHS) continuing commitment to information security, LLIS.gov is currently undergoing security enhancements to comply with the DHS Certification and Accreditation (C&A) process. The C&A process is a systematic procedure for evaluating, describing, testing, and authorizing systems for operation in a production environment. Certification is a comprehensive assessment of the security controls of the LLIS.gov system and accreditation is the official decision to authorize operation of LLIS.gov. Together, these activities help to ensure DHS information technology assets and data are protected and secure.
In order for LLIS.gov to comply with C&A requirements, we have made a number of security modifications. Beginning 19 June 2008, LLIS.gov members, upon initial login, will be prompted to answer the following items: |
|
|---|
Some users will be prompted to change their password to comply with the following requirements:
- The password must be between 8 and 15 characters long and must contain at least one uppercase letter, one lowercase letter, one numeric value, and one "special character" (Shift + numeric).
- The password must not contain a dictionary word.
- The password must not be identical to the username.
- The password must not be the same as the previous 8 passwords.
- Users will be prompted to re-set their passwords every 90 days.
|
|
|---|
We've replaced some of the security questions with ones that comply with C&A requirements. If users originally answered any of the questions that are no longer valid, they will be prompted to choose a different question to answer. The new list of security questions are:
- What was your first job?
- What is the last name of your best friend?
- What model was your first car?
- When were your parents married?
|
|
|---|
- All users will be asked to verify their citizenship upon initial login.
|
|
|---|
- User accounts that are inactive for 180 days will be locked. Users who have not logged on to the system in the last 180 days will have to call the Help Desk to unlock and re-activate their accounts.
|
|
|---|
| As always, if you have any questions, please contact our Help Desk at (866) 476-4827 or help@llis.dhs.gov. |
|
|
