ComplianceNIST 800-53 enhancement
NIST-AC-2(5) Inactivity Logout
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- AC Access Control
- Control
- AC-2(5)
Control statement
Require that users log out when [Assignment: time period of expected inactivity or description of when to log out].
Discussion
Inactivity logout is behavior- or policy-based and requires users to take physical action to log out when they are expecting inactivity longer than the defined period. Automatic enforcement of inactivity logout is addressed by [AC-11](#ac-11).
Related
Enhancement of · Compliance (1)
- NIST-AC-2 Account Management NIST 800-53 control
Related control · Compliance (1)
- NIST-AC-11 Device Lock NIST 800-53 control