Detections
Analytics

800-53|AC-11a.

Title

SESSION LOCK

Description

Prevents further access to the system by initiating a session lock after [Assignment: organization-defined time period] of inactivity or upon receiving a request from a user; and

Reference Item Details

Category: ACCESS CONTROL

Family: ACCESS CONTROL

Audit Items

View all Reference Audit Items

NamePluginAudit Name
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple macOS 10.12 L2 v1.2.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple OSX 10.9 L2 v1.3.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple macOS 10.12 L2 v1.2.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple OSX 10.9 L2 v1.3.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple OSX 10.9 L2 v1.3.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple macOS 10.12 L2 v1.2.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.3.2 Secure screen saver corners - top right cornerUnixCIS Apple OSX 10.9 L2 v1.3.0
2.3.2 Secure screen saver corners - top right cornerUnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.3.2 Secure screen saver corners - top right cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.3.2 Secure screen saver corners - top right cornerUnixCIS Apple macOS 10.12 L2 v1.2.0
2.3.4 Set a screen corner to Start Screen SaverUnixCIS Apple OSX 10.11 El Capitan L1 v1.1.0
2.3.4 Set a screen corner to Start Screen SaverUnixCIS Apple OSX 10.10 Yosemite L1 v1.2.0
2.8 Set 'Password protect the screen saver' to 'Enabled'WindowsCIS Windows 8 L1 v1.0.0
2.9 Set 'Enable screen saver' to 'Enabled'WindowsCIS Windows 8 L1 v1.0.0
2.10 Set 'Seconds' to 'Enabled:900 or fewer seconds'WindowsCIS Windows 8 L1 v1.0.0
2.11 Set 'Screen saver executable name' to 'Enabled:scrnsave.scr'WindowsCIS Windows 8 L1 v1.0.0
AIOS-01-080002 - Apple iOS must lock the display after 15 minutes (or less) of inactivity.MDMMobileIron - DISA Apple iOS 10 v1r3
AIOS-01-080002 - Apple iOS must lock the display after 15 minutes (or less) of inactivity.MDMAirWatch - DISA Apple iOS 10 v1r3
AIOS-12-000300 - Apple iOS must be configured to lock the display after 15 minutes (or less) of inactivity.MDMAirWatch - DISA Apple iOS 12 v2r1
AIOS-12-000300 - Apple iOS must be configured to lock the display after 15 minutes (or less) of inactivity.MDMMobileIron - DISA Apple iOS 12 v2r1
AIOS-13-000300 - Apple iOS/iPadOS must be configured to lock the display after 15 minutes (or less) of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 13 v2r1
AIOS-13-000300 - Apple iOS/iPadOS must be configured to lock the display after 15 minutes (or less) of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS 13 v2r1
AIOS-14-000300 - The mobile operating system must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS 14 v1r3
AIOS-14-000300 - The mobile operating system must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 14 v1r3
AIOS-15-006700 - Apple iOS/iPadOS 15 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 14 v1r4
AIOS-15-006700 - Apple iOS/iPadOS 15 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS 14 v1r4
AIOS-15-006800 - Apple iOS/iPadOS 15 must be configured to lock the display after 15 minutes (or less) of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 14 v1r4
AIOS-15-006800 - Apple iOS/iPadOS 15 must be configured to lock the display after 15 minutes (or less) of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS 14 v1r4
AIOS-16-006700 - Apple iOS/iPadOS 16 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 16 v2r1
AIOS-16-006700 - Apple iOS/iPadOS 16 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS 16 v2r1
AIOS-16-006800 - Apple iOS/iPadOS 16 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 16 v2r1
AIOS-16-006800 - Apple iOS/iPadOS 16 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS 16 v2r1
AIOS-17-006800 - Apple iOS/iPadOS 17 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS 17 v2r1
AIOS-17-006800 - Apple iOS/iPadOS 17 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 17 v2r1
AIOS-17-706700 - Apple iOS/iPadOS 17 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 17 BYOAD v1r1
AIOS-17-706700 - Apple iOS/iPadOS 17 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS BYOAD 17 v1r1
AIOS-17-706800 - Apple iOS/iPadOS 17 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS BYOAD 17 v1r1
AIOS-17-706800 - Apple iOS/iPadOS 17 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 17 BYOAD v1r1
AIOS-18-006800 - Apple iOS/iPadOS 18 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.MDMAirWatch - DISA Apple iOS/iPadOS 18 v1r1
AIOS-18-006800 - Apple iOS/iPadOS 18 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.MDMMobileIron - DISA Apple iOS/iPadOS 18 v1r1
AIX7-00-001100 - AIX must be configured to allow users to directly initiate a session lock for all connection types.UnixDISA STIG AIX 7.x v3r1
AOSX-13-000010 - The macOS system must initiate a session lock after a 15-minute period of inactivity.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-030014 - The macOS system must be configured to lock the user session when a smart token is removed.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-000004 - The macOS system must initiate a session lock after a 15-minute period of inactivity.UnixDISA STIG Apple Mac OSX 10.14 v2r6