Security

Ask something
Question Locked

Security - Why force a log off

0 helpful
4 replies

by lrivenburg

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Could some of you with more knowledge than I help me out? I need to have some security justifications for forcing my users to log off after their session has been idle for a given amount of time. I also would like to know if there are any industry standards for how much idle time is 'acceptable'.

TIA for any input.

4 replies

by cmiller5400

Why? Just lock the workstation after x minutes... If it is a terminal session, then boot them in 15-30 minutes of inactivity. Just remember to account for "food consumption" times. ;)

by lrivenburg

I have the screen savers set to x min. but until recently I have had no log off for my terminal sessions. I have developers who have abused this and left TS sessions open for weeks. I want them off because I believe they are abusing the access. I need to justify my 'want' with security reasons for requiring a logoff. I need help with the justifications and what industry standards are for amount of time allowed to be idle before forcing a logoff.

by oh smeg

It may be necessary to leave a terminal open to test something but it may not.

The most obvious is that if the Session is not closed and the Person is not there it is possible of someone else taking charge of their workstation and changing their work destroying months/weeks/day/hours of work in the process.

Without knowing what is being done there is very hard to offer any other possible reasons for security reasons.

Col

This discussion is closed to new replies.