Password expiration
A Participant shall require that Registrants’ passwords be reconfirmed or changed every 90 days.