Configure automatic session locking on enterprise assets after a defined period of inactivity. For
general purpose operating systems, the period must not exceed 15 minutes. For mobile end-user
devices, the period must not exceed 2 minutes.
The organization automates session locking on enterprise assets by configuring general-purpose operating systems to lock after 15 minutes of inactivity and mobile devices after 2 minutes.
Organization utilizes centralized policy management tools to enforce these settings and educates users on the importance of locking sessions.