Sessions terminate automatically when a defined condition is met.
What it actually means
Automatically terminate a user session after a defined condition — such as a period of inactivity or the end of the workday — particularly for remote and application sessions handling CUI. This complements screen lock by actually ending the session, not just locking it.
Pass or fail — an assessor needs a "yes" to each
- Are user sessions automatically terminated after a defined condition (inactivity, time of day)?
What to have ready
- Configuration showing session-termination conditions
Where teams trip up
- Sessions that never end as long as the connection stays open
- Only screen lock, with no session termination
See where this control puts your score
Run all 110 requirements free in about 10 minutes.
Calculate your SPRS score →