CMMC 1.0 Practice AC.2.010 Requirement:

Use session lock with pattern-hiding displays to prevent access and viewing of data after a period of inactivity.

CMMC 1.0 AC.2.010 Requirement Explanation:

You can not rely on users to lock their session before stepping away from their system (e.g., locking their computer screen). By configuring your systems to automatically lock after a period of activity you reduce the risk of your systems being accessed by unauthorized persons.

Example CMMC 1.0 AC.2.010 Implementation:

Configure your systems to lock their screens and display a screen saver after a period of inactivity. A common setting is to display a screen saver after 15 minutes. To regain access to the system, the user must log in again.

CMMC 1.0 AC.2.010 Scenario(s):

- Scenario 1:

John, an employee at your company forgot to lock his workstation before leaving his desk. When he comes back to his desk his system has been locked and he has to login again. This is thanks to a setting on his computer that locks the session after 15 minutes of inactivity.

Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:


Compliance Accelerator

Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.

Quantum Assessor

Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.

Supply Chain Verifier

Trust is everything. Verify, monitor, and support subcontactor compliance.