AC-12 Session Termination
Control: System automatically terminates a session after [Assignment: organization-defined time period] of inactivity.
Illustrative Controls and TIBCO LogLogic Solution
TIBCO LogLogic reports and alerts should be used to ensure that systems are configured to terminate an electronic session after a predetermined time of inactivity. TIBCO LogLogic reports detail configuration changes that impact logoffs due to system inactivity and TIBCO LogLogic alerts can trigger a response by the system administrator when system inactivity logout configurations are altered or disabled. Group policies that govern the logout inactivity configurations can also be reviewed or trigger alerts when they are altered or disabled so this Implementation specification is enforced.
Copyright © Cloud Software Group, Inc. All rights reserved.