PASSWORD POLICY
Nyttio Demo Ltd
Version: 1.0 • Effective from: 2026-10-25 • Policy owner: IT owner
1. Purpose
Ensure that passwords and credentials are used securely and protect the organisation's information, systems and services from unauthorised access.
2. Scope
All employees, contractors and others with access to the organisation's systems and information, regardless of device or location.
3. Core requirements
• Use a passphrase with at least 15 characters.
• The passphrase should consist of several unrelated words and may contain spaces. Specific uppercase, number or symbol requirements should not be imposed.
• Use a unique password for every service and system.
• Multi-factor authentication (MFA) must be enabled wherever possible.
• Use an approved password manager to store and manage passwords.
• Change passwords: on suspicion or incident.
• Never share passwords through email, chat or other insecure channels.
