CFS User Credentials Policy
This document is a binding agreement between the service provider (i.e. MoFNE) and the user detailing the important guidelines, user responsibilities and the disciplinary actions for the CFS (i.e. Central Financial System). MoFNE designed this protocol as per the ISO 27001 Standard best practices in order to mitigate the security risks and to enforce accountability if the CFS user violates any of the terms and conditions outlined in this document.
Guidelines:
1.1 All CFS information entered and stored in the system or deleted from the System is confidential. Any disclosure of this confidential Information other than to authorized persons will result in disciplinary actions.
1.2 The Financial Systems Development Directorate (i.e. FSDD) of MoFNE will provide the user a temporary password and the user is required to change it.
1.3 The new password is case sensitive and must contain at least ten alphanumeric characters. A password should not contain the user name or repeated characters. It should contain at least one alphabet and at least one number.
1.4 Passwords will expire automatically after forty five (i.e. 45) days. A pop up window prompts the user to change the password upon expiry.
1.5 The system will not allow the user to use the previous passwords that were used during the last 420 days.
1.6 The system will lock the account after 5 unsuccessful login attempts.
2.0 User Responsibilities
2.1 If the user forgets the password, he/she should contact MoFNE helpdesk to reset the password and the user will have to choose a new password as described in sub Para 1.3 above.
2.2 The user should not disclose the password to others.
2.3 The user must change the password immediately if the user suspects that others might have known it. Password should not be recorded in place from where it may be easily obtained.
2.4 The user is responsible for the use of the system while logged on with his/her credentials and the user should not allow other users to use the system on his/her behalf.
2.5 The user must avoid leaving his workstation unattended while logged on, and should logout/shutdown after the working hours.
2.6 Whenever a user leave the ministry or gets transferred to another ministry , the user should notify CFS so that his/her access be modified
3.0 CSB / MoFNE Disciplinary action(s)
In case of failure to comply with the policies and guidelines set out in this document, MoFNE might enforce disciplinary action in accordance with the rules and regulations of the Civil Service Bureau (CSB) in the following manner:
3.1 An initial breach of the protocol will result in a written reprimand.
3.2 Subsequent breach of the protocol after the issue of a written reprimand may result in the termination of employment.
3.3 A serious breach of the protocol may result in instant dismissal and/ or criminal charges.
All enquiries or requests for assistance should be made to the MoFNE Help Desk on (+973)17575577/17575575.
I, the undersigned acknowledge that I have received, read and understood this protocol and the schedule hereto and agree to be bound by its terms and conditions.