Assessment Objective
Determine if:
- a user session is terminated automatically after [Assignment: conditions or trigger events].
Assessment Methods
Examine
- access control policy and procedures
- procedures for session termination
- system design documentation
- system configuration settings
- list of conditions or trigger events requiring session disconnect
- system audit records
- system security plan
- other relevant documents or records
Interview
- personnel with information security responsibilities
- system developers
- system administrators
Test
- automated mechanisms for implementing user session termination
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | 03.01.11 Session Termination |