AC-2(5)—Account Management
PBMM (P2)
Secret (P2)
Technical
>Control Description
ACCOUNT MANAGEMENT | INACTIVITY LOGOUT The organization requires that users log out when ⚙organization-defined time-period of expected inactivity or description of when to log out. Related controls: SC-23
>Tailoring Guidance
Users should be required to log out at the end of the business day in order to enable the organization to apply the appropriate patches to the operating system. Organizations are typically unable to patch the operating system when a user has an active session.
>Profile-Specific Parameters
(5a) time period [end of business day]
Ask AI
Configure your API key to use AI features.