03.01.10 Device Lock

This policy establishes requirements for implementing device lock mechanisms on all systems within the organization's information systems. The objective is to safeguard sensitive information by preventing unauthorized access to systems when they are left unattended or inactive.

• A.03.01.10.ODP[01]: one or more of the following PARAMETER VALUES are selected: {a device lock is initiated after of inactivity; the user is required to initiate a device lock before leaving the system unattended}.
• A.03.01.10.ODP[02]: the time period of inactivity after which a device lock is initiated is defined (if selected).
• A.03.01.10.a: access to the system is prevented by .
• A.03.01.10.b: the device lock is retained until the user reestablishes access using established identification and authentication procedures.
• A.03.01.10.c: information previously visible on the display is concealed via device lock with a publicly viewable image.