HOME

AC-2 (5)

AC-2 (5) H M
Description

The organization requires that users log out when [Assignment: organization-defined time-period of expected inactivity or description of when to log out].

FedRAMP
  • H AC-2 (5) [inactivity is anticipated to exceed Fifteen (15) minutes]
DISA Cloud Computing SRG

At the end of the users standard work period unless otherwise defined in formal organizational policy.

Source:
DoD RMF TAG

Supplemental Guidance

Further Guidance

AC-2 (5) Guidance: Should use a shorter timeframe than AC-12.

Related Controls