AC-12(02) Termination Message
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Termination Message
Control
Display an explicit logout message to users indicating the termination of authenticated communications sessions.
Discussion
Logout messages for web access can be displayed after authenticated sessions have been terminated. However, for certain types of sessions, including file transfer protocol (FTP) sessions, systems typically send logout messages as final messages prior to terminating sessions.
Assessment objective
AC-12(02) an explicit logout message is displayed to users indicating the termination of authenticated communication sessions.
STIG rules that implement this control 1
Application Security and Development V6R5
- APSC-DV-000100 CAT III The application must display an explicit logoff message to users indicating the reliable termination of authenticated communications sessions.