AC-12 Session Termination

Control: System automatically terminates a session after [Assignment: organization-defined time period] of inactivity.

Illustrative Controls and TIBCO LogLogic Solution

TIBCO LogLogic reports and alerts should be used to ensure that systems are configured to terminate an electronic session after a predetermined time of inactivity. TIBCO LogLogic reports detail configuration changes that impact logoffs due to system inactivity and TIBCO LogLogic alerts can trigger a response by the system administrator when system inactivity logout configurations are altered or disabled. Group policies that govern the logout inactivity configurations can also be reviewed or trigger alerts when they are altered or disabled so this Implementation specification is enforced.

Reports and Alerts

Use the following reference to see the AC-12 reports and alerts: AC-12.