NIST 800-53 Rev 5
424 controls available
AC-02(05)moderatehigh
Inactivity Logout
Access Control
Control Statement
Require that users log out when {{ insert: param, ac-02.05_odp }}.
Discussion
Inactivity logout is behavior- or policy-based and requires users to take physical action to log out when they are expecting inactivity longer than the defined period. Automatic enforcement of inactivity logout is addressed by [AC-11](#ac-11).
- Framework
- NIST SP 800-53 Rev 5
- Family
- Access Control
- Baselines
- moderate, high