HIPAA 164.312(a)(2)(iii) - Automatic Logoff (A): Terminate an electronic session after a predetermined time of inactivity 'AutoDisconnect'.

Information

NOTE : HIPAA does not specify a hard limit for this value. Currently set to '15'.
http://csrc.nist.gov/publications/nistpubs/800-66-Rev1/SP-800-66-Revision1.pdf pg. D-11

See Also

http://csrc.nist.gov/publications/nistpubs/800-66-Rev1/SP-800-66-Revision1.pdf

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-12, CSCv6|3, CSCv6|16.4

Plugin: Windows

Control ID: 205d900c04ad00c153ef1898b8083ef7d5600667d027e74d2260c0e42fa093ff