Session time-outs and lockouts must be enforced through technical controls on all systems containing covered information so that inactive or unattended sessions are automatically restricted.

Session time-outs and lockouts are enforced through technical controls

— Pyrana Information Security Policy.pdf

for all systems containing covered information

— Pyrana Information Security Policy.pdf

lockouts are enforced

— Pyrana Information Security Policy.pdf