← Back to catalog
AC-2(5)
Inactivity Logout
Access Control (AC)
Baselines
Low · Not includedModerate · IncludedHigh · Included
Description
Require that users log out when [assignment].
Discussion
Inactivity logout is behavior- or policy-based and requires users to take physical action to log out when they are expecting inactivity longer than the defined period. Automatic enforcement of inactivity logout is addressed by [AC-11](#ac-11).
Implementation guidance
No content available.
CSF 2.0 crosswalk
No CSF mappings exist for this control.