AC-2.5: Inactivity Logout

Statement

• Require that users log out when time period of expected inactivity or description of when to log out .

  • • Guidance:

      Should use a shorter timeframe than AC-12.