164.312(a)(2)(iii) - Automatic Logoff (Addressable)
Implement electronic procedures that terminate an electronic session after a predetermined time of inactivity.
Illustrative Controls and TIBCO LogLogic Solution
TIBCO LogLogic reports and alerts should be used to ensure that systems are configured to terminate an electronic session after a predetermined time of inactivity. TIBCO LogLogic reports contain information about configuration changes that impact logoffs due to system inactivity. TIBCO LogLogic alerts can trigger a response by the system administrator when system inactivity logout configurations are altered or disabled. Group policies that govern logout inactivity configurations can also be reviewed or trigger an alerts when they are altered or disabled so this Implementation specification is enforced.
Reports and Alerts
Use the following link or reference to see the 164.312(a)(2)(iii) reports and alerts: 164.312(a)(2)(iii) - Automatic Logoff (Addressable).