2.3.1 Set an inactivity interval of 20 minutes or less for the screen saver

Information

Setting an inactivity interval for the screensaver prevents unauthorized persons from viewing a system left unattended for an extensive period of time.

Solution

Perform the following to implement the prescribed state:
Open System Preferences
Select Desktop & Screen Saver
Select Screen Saver
Set Start after to 20 minutes or less
Alternatively:
In Terminal, run one of the the following commands:
/usr/bin/defaults -currentHost write com.apple.screensaver idleTime -int 600
/usr/bin/defaults -currentHost write com.apple.screensaver idleTime -int 1200
There are anomalies if the command line is used make the setting something other than what is available in the GUI Menu. Choose either 10 minutes or 20 minutes.

See Also

https://workbench.cisecurity.org/files/300

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-11, CSCv6|16.5

Plugin: Unix

Control ID: c078380d41c91e53c6d8cf098312796fc5b2cb1f80529b2c564c858246d8372a