graphgrc

SCF - IAC-25 - Session Termination

Automated mechanisms exist to log out users, both locally on the network and for remote sessions, at the end of the session or after an organization-defined period of inactivity.

Mapped framework controls

NIST 800-53

Control questions

Does the organization use automated mechanisms to log out users, both locally on the network and for remote sessions, at the end of the session or after an organization-defined period of inactivity?