+AC-12(01) User-initiated Logouts

AC-12(01) User-initiated Logouts

Control

Provide a logout capability for user-initiated communications sessions whenever authentication is used to gain access to [Assignement: information resources].

Discussion

Information resources to which users gain access via authentication include local workstations, databases, and password-protected websites or web-based services.

Assessment Objective

a logout capability is provided for user-initiated communications sessions whenever authentication is used to gain access to [Assignement: information resources].

Assessment Method

Examine

Access control policy procedures addressing session termination user logout messages system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developers

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by AC-12(01) User-initiated Logouts – Assessment Procedure
is blocked by User-Initiated Logouts / Message Displays