800-53|AC-11(1)

Title

PATTERN-HIDING DISPLAYS

Description

The information system conceals, via the session lock, information previously visible on the display with a publicly viewable image.

Supplemental

Publicly viewable images can include static or dynamic images, for example, patterns used with screen savers, photographic images, solid colors, clock, battery life indicator, or a blank screen, with the additional caveat that none of the images convey sensitive information.

Reference Item Details

Category: ACCESS CONTROL

Parent Title: SESSION LOCK

Family: ACCESS CONTROL

Baseline Impact: MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.2.6 Set 'exec-timeout' to less than or equal to 10 minutes for 'line aux 0'CiscoCIS Cisco IOS 16 L1 v1.1.2
1.2.7 Set 'exec-timeout' to less than or equal to 10 minutes 'line console 0'CiscoCIS Cisco IOS 16 L1 v1.1.2
1.2.8 Set 'exec-timeout' less than or equal to 10 minutes 'line tty'CiscoCIS Cisco IOS 16 L1 v1.1.2
1.2.9 Set 'exec-timeout' to less than or equal to 10 minutes 'line vty'CiscoCIS Cisco IOS 16 L1 v1.1.2
1.2.10 Set 'transport input none' for 'line aux 0'CiscoCIS Cisco IOS 16 L1 v1.1.2
18.1.1.1 Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
18.1.1.1 Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
18.1.1.1 Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + NG
18.1.1.1 Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1
18.1.1.2 Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
18.1.1.2 Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + NG
18.1.1.2 Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1
18.1.1.2 Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
18.4.10 Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL + NG
18.4.10 Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL
18.4.10 Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1
18.4.10 Ensure 'MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)' is set to 'Enabled: 5 or fewer seconds'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + NG
18.8.28.3 Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
18.8.28.3 Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1
18.8.28.3 Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + NG
18.8.28.3 Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
18.8.34.6.3 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
18.8.34.6.3 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + NG
18.8.34.6.3 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1
18.8.34.6.3 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
18.8.34.6.4 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
18.8.34.6.4 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
18.8.34.6.4 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1
18.8.34.6.4 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + NG
18.8.34.6.5 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1
18.8.34.6.5 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + NG
18.8.34.6.5 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL + NG
18.8.34.6.5 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL
18.8.34.6.6 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL + NG
18.8.34.6.6 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL
18.8.34.6.6 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + NG
18.8.34.6.6 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1
18.9.64.4 Ensure 'Allow Cortana above lock screen' is set to 'Blocked'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
18.9.64.4 Ensure 'Allow Cortana above lock screen' is set to 'Blocked'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1
18.9.64.4 Ensure 'Allow Cortana above lock screen' is set to 'Blocked'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
18.9.64.4 Ensure 'Allow Cortana above lock screen' is set to 'Blocked'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + NG
18.9.65.3.10.1 Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L2
18.9.65.3.10.2 Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L2
18.9.86.1 Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1
18.9.86.1 Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
18.9.86.1 Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + NG
18.9.86.1 Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
19.1.3.1 Ensure 'Enable screen saver' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL + NG
19.1.3.1 Ensure 'Enable screen saver' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL
19.1.3.1 Ensure 'Enable screen saver' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + NG