Navigate

AC-2 (5)

AC-2 (5): Inactivity Logout

The organization requires that users log out when [Assignment: organization-defined time-period of expected inactivity or description of when to log out].

Supplemental

None

CIA Levels
Confidentiality	low
Integrity	low
Availability	low

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to AC-2 (5).

Control	Description
SC-23	The information system protects the authenticity of communications sessions.

Enhancements

The controls below (if any) add on to the requirements of AC-2 (5).

Control	Description
No controls

Related CCIs

The CCIs below are tied to AC-2 (5).

CCI	Definition
CCI-000019	The organization requires that users log out in accordance with the organization-defined time period of inactivity or description of when to log out.
CCI-001406	The organization defines a time period of expected inactivity when users are required to log out.
CCI-002133	The organization defines other conditions when users are required to log out.