Systems containing covered information must enforce session time-outs and lockouts through technical controls so that access is automatically restricted when users are inactive or absent.

Session time-outs and lockouts are enforced through technical controls

— Pyrana Information Security Policy.pdf

for all systems containing covered information

— Pyrana Information Security Policy.pdf

lockouts are enforced through technical controls

— Pyrana Information Security Policy.pdf