NIST SP 800-171 & CMMC 2.0 3.1.10 Requirement:
Use session lock with pattern-hiding displays to prevent access and viewing of data after a period of inactivity.
NIST SP 800-171 & CMMC 2.0 3.1.10 Requirement Explanation:
You can not rely on users to lock their session before stepping away from their system (e.g., locking their computer screen). By configuring your systems to automatically lock after a period of inactivity you reduce the risk of your systems being accessed by unauthorized persons.
Example NIST SP 800-171 & CMMC 2.0 3.1.10 Implementation:
Configure your systems to lock their screens and display a screen saver after a period of inactivity. A common setting is to display a screen saver after 15 minutes of inactivity. To regain access to the system, the user must log in again. This can be configured on Windows computers using group policy or Microsoft EndPoint manager.
NIST SP 800-171 & CMMC 2.0 3.1.10 Scenario(s):
- Scenario 1:
John, an employee at your company forgot to lock his workstation before leaving his desk. When he comes back to his desk his system has been locked and he has to login again. This is thanks to a setting on his computer that locks the session after 15 minutes of inactivity.
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.