This page uses extracted PDF text. Text can misread numbers, dates or table columns. Check the PDF before quoting or interpreting it. Redacted areas remain redacted.
RFP Name RFP 20-xxxx-xxxx
D.5 Does system maintain a history of previously used passwords ☒ Yes Current Value: 10
to prevent reuse? ☐ No
D.6 Does the system allow for users to change their own ☒ Yes Please provide additional information below:
passwords at their discretion? ☐ No Users can change or reset their own passwords at
any time via self-service, including when they forget
or lose their password. Password changes are also
required upon first login and annually, but users are
not restricted from changing their password at their
discretion.
D.7 Does the system disable accounts after a specified number of ☒ Yes Current Number of Attempts: 5
consecutive invalid login attempts? ☐ No
D.8 Does system automatically activate a session termination or ☒ Yes Default Auto Logoff Time:
lock if user remains idle or inactive for a determined period of ☐ No The system has the ability to terminate a
time? session after a specific time of inactivity.
Sessions are terminated after 30 minutes of
inactivity.
D.9 Are passwords entered in a non-display field to access ☒ Yes Please provide additional information below:
application/system? ☐ No Password fields do not echo the user's password
when entered, and authentication feedback is
masked or obscured to prevent unauthorized
viewing. This ensures passwords are entered in
non-display (masked) fields for system/application
access.
D.10 Are passwords encrypted in storage and transmission? Please ☒ Yes Please provide additional information below:
identify strategy to secure passwords to include encryption ☐ No Passwords are never stored in plaintext. They are
algorithm, key size, and use of salted and password hashing. hashed using bcrypt, a salted hash function. Salts
are at least 32 bits and stored with the hash.
Passwords in transit are protected with TLS 1.2+; at
rest, data is encrypted with AES-256. Bcrypt is a
Page 14 of 19Jump to an indexed page (163 of 163)