SRG-OS-000028-GPOS-00009
The operating system must retain a users session lock until that user reestablishes access using established identification and authentication procedures.
The operating system must retain a users session lock until that user reestablishes access using established identification and authentication procedures.