+AC-12(02) Termination Message
|
AC-12(02) Termination Message
Control
Display an explicit logout message to users indicating the termination of authenticated communications sessions.
Discussion
Logout messages for web access can be displayed after authenticated sessions have been terminated. However, for certain types of sessions, including file transfer protocol (FTP) sessions, systems typically send logout messages as final messages prior to terminating sessions.
Assessment Objective
an explicit logout message is displayed to users indicating the termination of authenticated communication sessions.
Assessment Method
Examine
Access control policy
procedures addressing session termination
user logout messages
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
system developers
1. Visão geral
1.1 Referências
1.2 Requisitos identificados
1.3 Regulamentos relacionados
2. Requisitos identificados
Requisitos
| Fonte |
Requisito |
3. Regulamentos relacionados
Regulamentos
| Fonte |
Regulamentação |
Pedidos ligados
|