Cybersecurity; About Cybersecurity; About Password Policies And Password Expiration - NDD EasyOne Air Operator's Manual

Cybersecurity

5. Cybersecurity
5.1.

About cybersecurity

5.2.

About password policies and password expiration

Operator's Manual V03 • EasyOne Air • EasyOne Connect
© ndd Medizintechnik AG • Technoparkstrasse 1, 8005 Zurich, Switzerland • www.ndd.ch
EasyOne Air is protected against cyberattacks. However, to maintain security,
you must follow the guidelines that are laid out in this chapter.
EasyOne Connect can be installed on regular Windows PCs. The operating
institution is responsible for installing an antivirus software and a firewall on
the PC, for installing critical Windows updates regularly, and for keeping the
PC otherwise secure. EasyOne Connect does not run with Windows
administrator privileges.
EasyOne Air itself is not directly connected to the network.
EasyOne Connect can be connected to a network for various purposes, but can
also function stand-alone without network access. The file-based database is
encrypted. Alternatively, it is also possible to connect EasyOne Connect to an
SQL-server-based database.
You can use a combination of user name and password in order to control
access to EasyOne Connect. It is the responsibility of the operating institution
to apply the appropriate password policies (for example, password strength
and password renewal intervals).
EasyOne Connect includes functionality for password strength and password
expiration requirements. In case user handling is deactivated a default
password is used to restrict access to certain functionalities. To comply with
security policies, the manufacturer recommends that you activate user
handling.
Follow these general recommendations on password strength in case your
institution does not have a more specific policy:
• Use a minimum password length of 8 characters.
• Include lower-case and upper-case alphabetic characters, numbers and
symbols.
• Generate passwords randomly where feasible.
Follow this general recommendation for a password renewal interval in case
your institution does not have a more specific policy:
• Passwords should be renewed after 90 days.
 About user handling and the default password of EasyOne Connect  8 2
9000007/03
40
37/105