1. Procedure Title
Name of the Process: Secure Credential Storage Using LastPass
2. Purpose
Brief Description: To standardize the secure storage of all company-related credentials using LastPass, enhancing data security and reducing the risk of unauthorized access.
3. Scope
Involved Areas: All departments across the organization.
4. Responsibilities
Roles and Responsibilities:
All Employees: Responsible for adhering to credential storage policies.
Project Manager/Owners: Provides LastPass training, manages access permissions, and assists with any issues related to LastPass.
5. Definitions and Key Terms
Glossary:
- LastPass: A password manager that stores encrypted passwords online.
- Local Storage: Any data stored directly on a device’s hard drive.
6. Procedure Details
6.1. Preparation and Prerequisites
- All employees must have a LastPass account set up by the IT department.
- Employees must undergo basic training on using LastPass effectively.
6.2. Step-by-Step Procedure
Step 1: Whenever a password is created or updated, enter it directly into LastPass.
Step 2: Configure your web browsers to never save passwords. In browser settings, select ‘Never’ for the password save option.
Step 3: Regularly check and update stored credentials in LastPass.
Step 4: Use LastPass’s auto-fill feature to log in to websites, ensuring no passwords are manually typed or stored locally.
Step 5: Report any issues or discrepancies to the IT department immediately.
6.3. Tools and Resources
- LastPass software.
- Support documentation and training materials provided by the Project Manager.
7. Safety and Compliance Measures
Applicable Regulations: Adherence to NDA and other relevant data protection laws ensuring secure handling of sensitive information.
8. Quality Control and Evaluation Metrics
Performance Indicators:
- Zero instances of passwords stored locally.
- Full adherence to the SOP as verified through periodic audits.
9. Exception and Problem Handling
- In the event LastPass is not functioning, contact PM immediately. Do not revert to storing passwords locally under any circumstances.
- If a password is accidentally saved locally, inform PM to ensure it is securely removed and transferred to LastPass.
10. Documentation and Record Keeping
Documentation Requirements:
- Training attendance and completion records.
- Slack onboarding checklist.
11. Procedure Review and Update
Review Frequency: Annually, or as required by changes in technology or compliance requirements.