---
type: concept
title: Account Security Policy
tags: [security, policy, compliance]
related: [zentraler-nutzeraccount, universitatsrechenzentrum-urz]
created: 2026-06-30
updated: 2026-06-30
sources: ["output/rz_uni_greifswald_de_dienste_allgemein_zentraler_nutzeraccount_info.md"]
---

# Account Security Policy

The **Account Security Policy** defines the legal and operational requirements for the handling of central user credentials at the Universität Greifswald.

## Legal Basis
The policy is grounded in the **URZ Usage Regulations** (Nutzungsordnung des URZ), specifically **§6 Abs. 2 Pkt. 5**, which mandates that central user accounts are personal and non-transferable.

## Core Requirements
- **Non-Disclosure**: Users must not share their username or password with any third party.
- **Service Restriction**: Credentials must only be used for services officially provided by or affiliated with the Universität Greifswald. Users are explicitly forbidden from providing credentials to third-party apps, websites, or software.

## Risk Mitigation
The policy aims to prevent "identity theft" within the university network. If credentials are leaked, third parties can act in the user's name, potentially causing damage to the individual user and the institution.

## Enforcement Mechanism
The [[universitatsrechenzentrum-urz]] employs active monitoring of access patterns to detect suspicious activity. 

### Penalty Escalation
| Violation Stage | Action Taken |
|-----------------|-------------|
| First proven third-party use | Immediate account blocking |
| Repeated use after warning | Permanent revocation of URZ service access |