Security Settings

Module 1 security controls for password policy, 2FA, sessions, lockouts, and login monitoring.

Minimum length Require uppercase/lowercase/number/symbol Password expiry Prevent password reuse

2FA required for staff 2FA required for patients Admin session timeout Patient portal timeout Lock account after failed attempts Unlock method

Notify on suspicious login Block unknown countries Record IP and device Require audit review for lockouts

Security settings changes must be logged and only available to authorised admin roles.