SFS 0 / SF A

Back to SFS 0

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned workstations configured to automatically lock after a period of inactivity throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Workstations enforce automatic locking after a defined period of inactivity

Assessment criterion and evidence

Actor: Organization. Scope: Organization-owned workstations. Evidence period: Throughout the review period. Required evidence: Documented security policies specifying session lock timeout requirements; Configuration settings or audit logs demonstrating enforced automatic locking. Negative criterion: Workstations lack automatic locking configuration or have excessive timeout settings. Missing evidence: Pending evidence of workstation configuration policies and audit logs

View the JSON record (opens in a new tab).

Assessment result: unset.