AC-11—Device Lock

Prevent further access to the system by [Selection (one or more): initiating a device lock after ⚙organization-defined time period of inactivity; requiring the user to initiate a device lock before leaving the system unattended]; and

Retain the device lock until the user reestablishes access using established identification and authentication procedures.