2.2.6 - MobileIron - Set Maximum Auto-lock

Information

This control defines the number of minutes the device can be inactive before requiring the password be reentered. It is recommended that an inactivity timeout of no more than two (2) minutes be set.

Solution

From the MobileIron console, open the Policies and Configs -> Policies view. Under the Security Policy verify that Maximum Inactivity Timeout is set to 2 or less.

See Also

https://workbench.cisecurity.org/files/447

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-11, CSCv6|16.5

Plugin: MDM

Control ID: 66e9eaee60bdc43b647281469b96bcac17dce7eaed76e04c9a4604e8edae2630