NIST SP 800-171 & CMMC 2.0 Control 3.1.10 Requirement:
Use session lock with pattern-hiding displays to prevent access and viewing of data after a period of inactivity.
NIST SP 800-171 & CMMC 2.0 3.1.10 Requirement Explanation:
You can not rely on users to lock their session before stepping away from their system (e.g., locking their computer screen). By configuring your systems to automatically lock after a period of inactivity you reduce the risk of your systems being accessed by unauthorized persons.
Example NIST SP 800-171 & CMMC 2.0 3.1.10 Implementation:
Configure your systems to lock their screens and display a screen saver after a period of inactivity. A common setting is to display a screen saver after 15 minutes of inactivity. To regain access to the system, the user must log in again. This can be configured on Windows computers using group policy or Microsoft EndPoint manager.
NIST SP 800-171 & CMMC 2.0 3.1.10 Scenario(s):
- Scenario 1:
John, an employee at your company forgot to lock his workstation before leaving his desk. When he comes back to his desk his system has been locked and he has to login again. This is thanks to a setting on his computer that locks the session after 15 minutes of inactivity.
Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:
Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.
Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.
Supply Chain Verifier
Trust is everything. Verify, monitor, and support subcontactor compliance.