Privilege Account Management – Your Responsibility

            I would like personally to remind you that, if you have been entitled to have access to any kind of privilege account, you are responsible to protect them as a key and sensitive asset of Atos.

            If not already done, immediately ensure that for all privileged accounts these minimum rules are applied:

            •  Strong passwords should be setup in compliance with Atos password policy which must be enforced
            •  Passwords are never to be written in clear text ( electronic or paper),  must only be stored in encrypted form and must never be shared on open shares, lync or email
            •  Passwords have 8 characters minimum (or more characters if requested by the client) and are complex
            •  Passwords are changed on a regular frequency (at least 90 days minimal or more frequently if requested by the client)
            •  The privileged accounts must never been used to surf the Internet or open emails and must never be used for private usage
            •  All privileged accounts must be used with the utmost sensitivity and protected at all times against disclosure or misuse.

            For more details on passwords, we encourage you to review the Atos Password policy:
            ASM-SEC-0006 Password Policy
            For more details about specific security rules for administrators, review the Atos IT Administrator policy:
            ASP-SEC-0037 Atos IT Administrator Policy