AC-12(1): User-initiated Logouts

Control Family:

Access Control

CSF v1.1 References:

Baselines:

(Not part of any baseline)

Previous Version:

Control Statement

Provide a logout capability for user-initiated communications sessions whenever authentication is used to gain access to [Assignment: organization-defined information resources].

Supplemental Guidance

Information resources to which users gain access via authentication include local workstations, databases, and password-protected websites or web-based services.