CCI-002364

Display an explicit logout message to users indicating the reliable termination of authenticated communications sessions.

Implementation Guidance

Determine if an explicit logout message is displayed to users indicating the termination of authenticated communication sessions.

Validation Procedures

Examine: [SELECT FROM: Access control policy; procedures addressing session termination; user logout messages; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developers]. Test: [SELECT FROM: System session termination mechanisms; display of logout messages].

The controls below (if any) were marked by NIST as being related to CCI-002364.