密码要求

落叶归根12

各位老师，现在有没有哪部法规或指南明确写出对于密码长度或强度的要求或者法规/指南推荐，急求，谢谢！

布偶

前排围观哈

山顶洞人

这个，也需要指南？

兰陵-萧

密码一般六位以上，设置密码复杂性（大写、小写、数字或符号，至少四选三），设置密码不能重复历史次数……就OK了……

novacyl277

法规应该不会给出具体的长度的吧。
ICHQ7
欧盟GMP第4卷，附件11

Mint

PDA Technical Report No. 80
Data Integrity Management System for Pharmaceutical Laboratories

6.3.2.1 Controls for COTS Software for HPLC, GC, and Other Instrument Operations
The following are the minimal controls needed to safeguard COTS software and secure its use:
• Identifying the person(s) responsible for installing updates
• Addressing any changes to software through change control procedure with risk assessment
• Setting up secure individual user log-ins and periodic change of passwords
• Disabling data modification, deletion, or copying by anyone other than the administrator
• Restricting data deletion to only the authorized system administrator following established procedures,
with oversight by the Quality Unit
• Maintaining a detailed, QA-approved list of roles and responsibilities and copies of previous versions
of software when updating to allow reviewing, processing, audit trail review, backup/restore testing,
and reporting of older reports in case of regulatory requirements and investigations (recommended)
• Establishing periodic review of control effectiveness based on the risk posed, paying attention to
software upgrades and patches, and taking appropriate remediation and/or mitigation actions
• Maintaining a detailed list of roles, responsibilities, and access privileges for all the software in the laboratory

Russell-Cao

有点过了啊，设置个密码还要指导

y6886236

没有提过具体长度，但是基于安全角度出发密码一般六位以上，设置密码复杂性（大写、小写、数字或符号，至少四选三） 等等，是