AC-12(01) User-initiated Logouts
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
User-initiated Logouts
Control
Provide a logout capability for user-initiated communications sessions whenever authentication is used to gain access to [Assignment: information resources].
Discussion
Information resources to which users gain access via authentication include local workstations, databases, and password-protected websites or web-based services.
Parameters
ac-12.01_odp: information resources
Assessment objective
AC-12(01) a logout capability is provided for user-initiated communications sessions whenever authentication is used to gain access to [Assignment: information resources].
STIG rules that implement this control 1
Application Security and Development V6R5
- APSC-DV-000090 CAT II Applications requiring user access authentication must provide a logoff capability for user initiated communication session.