Cybersecurity; About Cybersecurity; About Password Policies And Password Expiration - NDD EasyOne Pro Operator's Manual

Cybersecurity

4 Cybersecurity
4.1

About cybersecurity

4.2

About password policies and password expiration

Operator's Manual V5.0 • EasyOne Pro/LAB Rev. 05
© ndd Medizintechnik AG • Technoparkstrasse 1, 8005 Zurich, Switzerland • www.ndd.ch
To maintain safety regarding cybersecurity, you must follow the guidelines
that are laid out in this chapter.
EasyOne Pro/LAB is based on a Windows Embedded 8 operating system.
Unnecessary ports and services have been deactivated. The software does
not run with operating system administrator privileges.
The user does not have general access to the underlying operating system.
Instead, the user's access to the underlying operating system is limited to the
configuration of certain desired functions, for example printer configuration,
network configuration, the date/time setting, or the language setting. An
antivirus software and a firewall are pre-installed on EasyOne Pro/LAB.
EasyOne Pro/LAB can be connected to a network for various purposes, but can
also function stand-alone without network access. The file-based database is
encrypted. Alternatively, it is also possible to connect EasyOne Pro/LAB to an
SQL-server-based database.
You can use a combination of user name and password in order to control
access to EasyOne Pro/LAB. It is the responsibility of the operating institution
to apply the appropriate password policies (for example, password strength
and password renewal intervals).
EasyOne Pro/LAB does not include functionality for password strength and
password expiration requirements. In case user handling is deactivated a
default password is used to restrict access to certain functionalities.
Follow these general recommendations on password strength in case your
institution does not have a more specific policy:
• Use a minimum password length of 8 characters.
• Include lowercase and uppercase alphabetic characters, numbers and
symbols.
• Generate passwords randomly where feasible.
Follow this general recommendation for a password renewal interval in case
your institution does not have a more specific policy:
• Passwords should be renewed after 90 days.
 About user handling and the default password, 105
Activating user handling and administering user accounts, 107
39
36/171