Equipment, a system, or software required to be tested, certified, and approved under this chapter shall: Conform to the minimum design standards of this regulation; and If applicable, conform to any specific additional design standards enumerated in this chapter. Equipment, a system, or software required to be tested, certified, and approved under this chapter shall, at a minimum, control logical access through: Generation of daily monitoring logs documenting: User access; and Security incidents; Assignment of rights and privileges to an individual user including specific protocols addressing: Creation, modification, and termination of a unique system account for each user; Password parameters which: Require a minimum length; Incorporate an expiration interval; and Result in lockout; and Administrator and override capabilities; Use of access permissions to restrict an unauthorized user from performing any the following with regard to critical files and directories: Reading; Altering; or Deleting; and Restricted access to critical files and directories through: Encryption; or If approved by the Commission, internal controls provided the internal controls include: The effective segregation of duties and responsibilities with regard to the system; and The automatic monitoring and recording by the system of access by an individual to its files and directories. Equipment, a system or software required to be tested, certified, and approved under this chapter shall, at a minimum, control system operations through: Generation of daily monitoring logs and alert messages documenting: System performance; Hardware problems; and Software errors; Authentication of the source of a data transmission; Transmission completeness and accuracy checks; Detection of corrupt or lost data packets; Rejection of a transmission; Use of cryptographic controls for critical transmissions of data; and Daily synchronization of its real time clock with that of equipment, systems, or software to which it is linked. Equipment, a system, or software required to be tested, certified, and approved under this chapter shall, at a minimum, control the integrity of data through: Validation of inputs to critical fields including data: Type; and Format; Rejection of corrupt data; Automatic and independent recordation of critical data; Independent verification of the accuracy of data; and Segregation of all security critical system programs, files, and directories from other programs, files, and directories. Equipment, a system, or software required to be tested, certified, and approved under this chapter shall, at a minimum, ensure continuity through: Data redundancy to permit a complete and prompt recovery of all information in the event of malfunction or power interruption; and Environmental protections, including an uninterruptible power supply to protect critical hardware.