IAC-25.1 ยท User-Initiated Logouts / Message Displays

Control Description

Mechanisms exist to provide a logout capability and display an explicit logout message to users indicating the reliable termination of the session.

Control Question
Assessment question for control validation

Does the organization provide a logout capability and display an explicit logout message to users indicating the reliable termination of the session?

Control Weighting
5
Validation Cadence
Annual
NIST CSF Function
Protect
Supply Chain Risk Management (SCRM) Tiers
Applicable SCRM tier levels for this control
Tier 3 - Tactical