SFS 1 / SF B

Back to SFS 1

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are privileged administrative sessions automatically terminated after a defined period of inactivity throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Sessions terminate automatically when idle beyond defined timeframes without requiring manual intervention

Assessment criterion and evidence

Actor: Administrator accounts and service identities with privileged access. Scope: All active privileged administrative sessions requiring elevated permissions. Evidence period: The entire review period specified in assessment criteria. Required evidence: Documented session timeout policy specifying maximum idle duration; System configuration records showing enforced session termination settings; Audit logs verifying automatic session termination events after inactivity. Negative criterion: Privileged sessions remain active indefinitely without enforced idle termination controls. Missing evidence: Pending until configuration records demonstrate implemented session timeout settings matching policy requirements

View the JSON record (opens in a new tab).

Assessment result: unset.