Loading

Subscribe to this Blog

Your email:

Are you preparing for an implementation or upgrade?

Kronos Implementation Strategy

Download the WFM Implementation Strategy White Paper

About Bryan

Resume Pic of Bryan deSilvaMusician & Yin Style Bagua practitioner. Over twenty years of software implementations and upgrades, project management, systems and applications development experience with a current focus on ADP eTime & Kronos Timekeeper/HR systems implementation. 

The "Kronos Guy" Blog

Current Articles | RSS Feed RSS Feed

Kronos passwords on the loose?

  
  
  
  
  
  
  

One of the things that we're finding in almost every Kronos Timekeeper Implementation Audit we perform is that some, if not all of the default passwords are still in place. This is even the case with hosted systems! I'm not one of those security freaks who suggest locking down systems until they are close to unusable, however, there is no excuse for not managing system passwords during an implementation or upgrade of Kronos software.

Kronos security wide openSo why is this happening? Why do Kronos implementers leave the door wide open? Well, some are rushed and only perform the tasks specifically defined in their work order. Other times we find that people leave them so it's easier to manage the account later. There are 15 usernames that should be changed before going live. Kronos documents how and why to change these in the Workforce Central implementation documentation and in a really good Password Management document you can find on the support site. There is no excuse to not 'deal' with this during implementation. Did you?

Comments

Bryan...great point! It's not just KRONOS either - I've seen this take place on number of different systems. One of the reasons I've heard for it was that if defaults aren't used, things break. I know that's not the case with KRONOS but sometimes I think it actually is. Have you heard of/seen this type of a situation? 
 
--E.W.
Posted @ Monday, July 26, 2010 9:24 AM by Edward Williams [thesiteman]
I've heard this for years for many software systems, usually by consultants that just didn't know how or didn't feel they could justify the cost to the customer. My feeling is that it's important to at least evaluate the security issues, document and make a decision. Ignoring it is more common though.
Posted @ Monday, July 26, 2010 10:17 AM by Bryan deSilva
Post Comment
Name
 *
Email
 *
Website (optional)
Comment
 *

Allowed tags: <a> link, <b> bold, <i> italics