Navigate

CCI-003694

CCI-003694 Definition

Defines the time until end of session, indicating the session will end.

Status
Type	CheckType.technical

Master Assessment Datasheet

Implementation Guidance

Determine if an explicit message to users is displayed indicating that the session will end in [AC-12(03)_ODP; time until the end of session for display to users is defined].

Validation Procedures

Examine: [SELECT FROM: Access control policy; procedures addressing session termination; time until end of session messages; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developers]. Test: [SELECT FROM: System session termination mechanisms; display of end of session time].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003694.

Control	Description
AC-12(3)	Display an explicit message to users indicating that the session will end in [time until the end of session for display to users is defined;].