Password Policy
Policy Statement: This Password Policy outlines the guidelines and requirements for creating and
managing passwords for user accounts on Spread X Securities Private Limited systems and networks.
The policy aims to ensure the security and confidentiality of company resources by enforcing strong
and unique passwords. It is the responsibility of all employees, channel partner, and authorized
users to comply with this policy.
Scope: This policy applies to all individuals who have user accounts on Spread X Securities Private
Limited systems and networks, regardless of whether they are employees, Auditor, channel partner,
or Investor.
Password Requirements:
Password Complexity:
Passwords must be at least 12 characters long. Passwords must contain a combination of upper and
lowercase letters, numbers, and special characters. Passwords should not include common
dictionary words or easily guessable patterns.
Password Protection:
Passwords must be kept confidential and not shared with anyone, including colleagues or helpdesk
personnel. Passwords should not be written down or stored in an unsecured manner. Passwords
must not be used for multiple accounts or systems.
Password Changes:
Passwords must be changed at least every 90 days. Users must not reuse any of the previous
passwords within the last 12 months. Users are encouraged to change their passwords immediately
if they suspect any unauthorized access.
Multi-Factor Authentication (MFA):
Where possible, multi-factor authentication should be enabled for user accounts. MFA helps to
provide an additional layer of security by requiring additional verification beyond just a password.
Password Management:
All user accounts should be protected with unique passwords. Password management tools, like
password managers, may be used to securely store and generate passwords. Users should report
any suspected or actual password breaches or unauthorized access immediately to the appropriate
IT personnel.
Compliance: All users must comply with this Password Policy and any supporting procedures and
guidelines. Violations of this policy may result in disciplinary action, up to and including termination,
as well as legal consequences, if applicable.
Policy Review: This Password Policy will be reviewed annually or as necessary to ensure its ongoing
effectiveness. Any updates or changes will be communicated to all employees and users.
By adhering to this policy, Spread X Securities Private Limited endeavours to protect its systems,
networks, and data from unauthorized access and ensure the confidentiality and integrity of its
resources.
The Policy has Approved by Board of Director of Spread X Securities Private Limited in Board meeting
held dated on 02/08/2023.
Enjoy 100%
Paperless journey
Paperless journey