There should be a defined procedure for the issue, cancellation, and alteration of authorisation to enter and amend data, including the changing of personal passwords.

• 应当有一个制定的规程来规定输入和修改数据，以及个人密码的权限的授予、取消和更改。