OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.312

164.312(a)(2)(iii)

paragraph (action item)

Automatic logoff (Addressable). Implement electronic procedures that terminate an electronic session after a predetermined time of inactivity.

164.312 Technical safeguards.

Related Frameworks

2 mappings across 5 frameworks
SCF2 mappings
CFG-02Secure Baseline Configurations
1.00
IAC-25Session Termination
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-11(1)Pattern-hiding Displays
1.00
AC-12Session Termination
1.00
AC-17(2)Protection of Confidentiality and Integrity Using Encryption
1.00
AC-18(1)Authentication and Encryption
1.00
AC-18(3)Disable Wireless Networking
1.00
AC-18(4)Restrict Configurations by Users
1.00
AC-19Access Control for Mobile Devices
1.00
AC-2Account Management
1.00
AC-2(5)Inactivity Logout
1.00
AC-2(7)Privileged User Accounts
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (23) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.11
1.00
3.1.2
1.00
3.1.3
1.00
3.13.1
1.00
3.13.11
1.00
3.13.2
1.00
3.13.4
1.00
3.13.5
1.00
3.14.1
1.00

+13 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000008
1.00
CCI-000010
1.00
CCI-000011
1.00
CCI-000012
1.00
CCI-000162
1.00
CCI-000163
1.00
CCI-000164
1.00
CCI-000213
1.00
CCI-000257
1.00
CCI-000258
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-203683r958636_ruleThe operating system must automatically terminate a user session after inactivity time-outs have expired or at shutdown.
1.00
SV-204777r1043182_ruleThe application server must automatically terminate a user session after organization-defined conditions or trigger events requiring a session disconnect.
1.00
SV-205055r831405_ruleThe ALG providing user access control intermediary services must automatically terminate a user session when organization-defined conditions or trigger events that require a session disconnect occur.
1.00
SV-205535r1043182_ruleThe Mainframe Product must automatically terminate a user session after conditions, as defined in site security plan, are met or trigger events requiring session disconnect.
1.00
SV-206414r1043182_ruleThe web server must set an absolute session timeout value of eight hours or less.
1.00
SV-206415r1043182_ruleThe web server must set an inactive timeout for sessions.
1.00
SV-206580r1043182_ruleThe DBMS must automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.
1.00
SV-207432r958636_ruleThe VMM must automatically terminate a user session after inactivity timeouts have expired or at shutdown.
1.00
SV-213715r879673_ruleDB2 must automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.
1.00
SV-214258r1043182_ruleThe Apache web server must set an inactive timeout for sessions.
1.00

+90 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.