id: "AC-11(01)" title: "Pattern-hiding Displays" family: "AC" family_name: "Access Control" sort_id: "ac-11.01" priority: "P1" implementation_level: "system" parent: "AC-11" enhancement: True
Statement
Conceal, via the device lock, information previously visible on the display with a publicly viewable image.
Guidance
The pattern-hiding display can include static or dynamic images, such as patterns used with screen savers, photographic images, solid colors, clock, battery life indicator, or a blank screen with the caveat that controlled unclassified information is not displayed.
Assessment Objective
information previously visible on the display is concealed, via device lock, with a publicly viewable image.
Access control policy
procedures addressing session lock
display screen with session lock activated
system design documentation
system configuration settings and associated documentation
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
system developers
System session lock mechanisms