id: "AC-12(03)" title: "Timeout Warning Message" family: "AC" family_name: "Access Control" sort_id: "ac-12.03" priority: "P1" implementation_level: "system" parent: "AC-12" enhancement: True
Statement
Display an explicit message to users indicating that the session will end in {{ insert: param, ac-12.03_odp }}.
Guidance
To increase usability, notify users of pending session termination and prompt users to continue the session. The pending session termination time period is based on the parameters defined in the AC-12 base control.
Assessment Objective
an explicit message to users is displayed indicating that the session will end in {{ insert: param, ac-12.03_odp }}.
Access control policy
procedures addressing session termination
time until end of session messages
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
system developers
System session termination mechanisms
display of end of session time