Inadvisable, but 'forbidden' depends on your company policies.
Preferred is to send it out of band/side channel. For instance, leave it in the user's voicemail. In theory they're the only ones with access as it is password/PIN protected. So you need a password to get the password.
If you have to send it via email, use an ambiguous subject & don't include the user ID in the same message.
--
John A. Jones, CISSP
Sr. Analyst, Global Information Security
Jones Lang LaSalle, Inc.
Voice: +1.630-455.2787
FAX: +1.312.601.1782
Email: john.jones@xxxxxxxxxx
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Burns, Bryan
Sent: Wednesday, October 08, 2008 9:08 AM
To: MIDRANGE-L@xxxxxxxxxxxx
Subject: Passwords in emails
What kind of risk do we take if I email an iSeries password to a remote user using my Microsoft Outlook client? Is this forbidden by any standards being that it's clear text?
Bryan Burns
iSeries Specialist
ECHO, Incorporated
Lake Zurich, Illinois
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
http://archive.midrange.com/midrange-l.
This email is for the use of the intended recipient(s) only. If you have
received this email in error, please notify the sender immediately and then
delete it. If you are not the intended recipient, you must not keep, use,
disclose, copy or distribute this email without the author's prior
permission. We have taken precautions to minimize the risk of transmitting
software viruses, but we advise you to carry out your own virus checks on
any attachment to this message. We cannot accept liability for any loss
or damage caused by software viruses. The information contained in this
communication may be confidential and may be subject to the attorney-client
privilege. If you are the intended recipient and you do not wish to receive
similar electronic messages from us in the future then please respond to the
sender to this effect.
midrange.com
