Check List

Password management for ticketing/printing system

Purpose

To review the password management for ticketing and printing system

Audit resources

Procedure

Verification

Document

Product

Detailed study list and method

-    Check if the password contains alphabets, numbers, special characters

-    Check if minimum of 6 characters are given and managed for password

-    Check if the term of password usage is limited in the authentication system

-    Check if all passwords are stored in ciphered format

-    Check if the user is required to change the initial password

-    Check if the re-use of the password is prohibited

-    Check if the use of predictable passwords containing names, company name, date of birth and so on are restricted

-    Check for existence of the procedure to verify the user identity at the time of providing new, modified or temporary passwords

-    Check if the temporary password is unique and not conducive to guessing

Check List

Check if the default password is changed

Purpose

To check if the password set as default is changed before use when server, PC or controller for the game data system is newly introduced

Audit resources

Procedure

Verification

Document

Access control list

Product

Detailed study list and method

-    Check if user is required to immediately change the initially given password

-    Check if account/password given at the time of product installation is modified immediately after installation