AC-2(5): Account Management | Inactivity Logout ()
Require that users log out when [Assignment: organization-defined time period of expected inactivity or description of when to log out].
Control IdentifierAC-2(5)
Latest Sync Date19/12/24 09:18:14
DiscussionInactivity logout is behavior- or policy-based and requires users to take physical action to log out when they are expecting inactivity longer than the defined period. Automatic enforcement of inactivity logout is addressed by AC-11.
Related ControlsAC-11.