+SYS.2.1.A1 Secure User Authorisation (B)

SYS.2.1.A1 Secure User Authorisation (B)

In order to use a client, users MUST be authenticated by the corresponding IT system. Users MUST use a screen lock when leaving their clients running without supervision. The screen lock SHOULD be activated automatically if no action has been taken by the user for a set period of time. Successful user authentication MUST be the only way to disable a screen lock. Users SHOULD be required to log out of IT systems and applications after completing their tasks.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.36 Identity theft