CCI|CCI-000057

Title

The information system initiates a session lock after the organization-defined time period of inactivity.

Reference Item Details

Category: 2009

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.8.9 Ensure GNOME Screensaver period of inactivity is configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.10 Ensure screensaver lock-enabled is setUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.11 Ensure overriding the screensaver lock-delay setting is preventedUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.12 Ensure session idle-delay settings is enforcedUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.13 Ensure GNOME Idle activation is setUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.14 Ensure the screensaver idle-activation-enabled settingUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.15 Ensure GNOME Lock Delay is configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.006 - The system configuration is not set with a password-protected screen saver. - ScreenSaveActiveWindowsDISA Windows Vista STIG v6r41
5.006 - The system configuration is not set with a password-protected screen saver. - ScreenSaverIsSecureWindowsDISA Windows Vista STIG v6r41
5.006 - The system configuration is not set with a password-protected screen saver. - ScreenSaveTimeOutWindowsDISA Windows Vista STIG v6r41
AIOS-01-080002 - Apple iOS must lock the display after 15 minutes (or less) of inactivity.MDMMobileIron - DISA Apple iOS 10 v1r3
AIOS-01-080002 - Apple iOS must lock the display after 15 minutes (or less) of inactivity.MDMAirWatch - DISA Apple iOS 10 v1r3
AIOS-12-000300 - Apple iOS must be configured to lock the display after 15 minutes (or less) of inactivity.MDMMobileIron - DISA Apple iOS 12 v2r1
AIOS-12-000300 - Apple iOS must be configured to lock the display after 15 minutes (or less) of inactivity.MDMAirWatch - DISA Apple iOS 12 v2r1
AIOS-13-000300 - Apple iOS/iPadOS must be configured to lock the display after 15 minutes (or less) of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS 13 v2r1
AIOS-13-000300 - Apple iOS/iPadOS must be configured to lock the display after 15 minutes (or less) of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 13 v2r1
AIOS-14-000300 - The mobile operating system must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS 14 v1r3
AIOS-14-000300 - The mobile operating system must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 14 v1r3
AIX7-00-003000 - AIX must automatically lock after 15 minutes of inactivity in the CDE Graphical desktop environment - lockTimeoutUnixDISA STIG AIX 7.x v2r9
AIX7-00-003000 - AIX must automatically lock after 15 minutes of inactivity in the CDE Graphical desktop environment - saverTimeoutUnixDISA STIG AIX 7.x v2r9
AOSX-13-000010 - The macOS system must initiate a session lock after a 15-minute period of inactivity.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-000004 - The macOS system must initiate a session lock after a 15-minute period of inactivity.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-15-000004 - The macOS system must initiate a session lock after a 15-minute period of inactivity.UnixDISA STIG Apple Mac OSX 10.15 v1r10
APPL-11-000004 - The macOS system must initiate a session lock after a 15-minute period of inactivity.UnixDISA STIG Apple macOS 11 v1r5
APPL-11-000004 - The macOS system must initiate a session lock after a 15-minute period of inactivity.UnixDISA STIG Apple macOS 11 v1r8
APPL-12-000004 - The macOS system must initiate a session lock after a 15-minute period of inactivity.UnixDISA STIG Apple macOS 12 v1r8
APPL-13-000004 - The macOS system must initiate a session lock after a 15-minute period of inactivity.UnixDISA STIG Apple macOS 13 v1r3
Big Sur - Enforce Screen Saver TimeoutUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Enforce Screen Saver TimeoutUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Enforce Screen Saver TimeoutUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Enforce Screen Saver TimeoutUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Enforce Screen Saver TimeoutUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Enforce Screen Saver TimeoutUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enforce Screen Saver TimeoutUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Enforce Screen Saver TimeoutUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Catalina - Enforce Screen Saver TimeoutUnixNIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Enforce Screen Saver TimeoutUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Enforce Screen Saver TimeoutUnixNIST macOS Catalina v1.5.0 - 800-53r5 Low
Catalina - Enforce Screen Saver TimeoutUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Enforce Screen Saver TimeoutUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Enforce Screen Saver TimeoutUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Enforce Screen Saver TimeoutUnixNIST macOS Catalina v1.5.0 - All Profiles
Catalina - Enforce Screen Saver TimeoutUnixNIST macOS Catalina v1.5.0 - 800-171
Configuring an automatic logout for idle sessions - Configuration utilityF5Tenable F5 BIG-IP Best Practice Audit
Configuring an automatic logout for idle sessions - Console SessionsF5Tenable F5 BIG-IP Best Practice Audit
Configuring an automatic logout for idle sessions - SSHF5Tenable F5 BIG-IP Best Practice Audit
Configuring an automatic logout for idle sessions - TMSHF5Tenable F5 BIG-IP Best Practice Audit
DKER-EE-002490 - The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls must be set to 10 and 0 respectively in Docker Enterprise - lifetime_minutesUnixDISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r1
DKER-EE-002490 - The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls must be set to 10 and 0 respectively in Docker Enterprise - renewal_threshold_minutesUnixDISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r1
F5BI-DM-000137 - The BIG-IP appliance must be configured to terminate all management sessions after 10 minutes of inactivity.F5DISA F5 BIG-IP Device Management STIG v2r3