Question AAAI-13
Does your application automatically lock the session or log-out an account after a period of inactivity?
Weight | 15 |
High Risk | No |
Required | Yes |
Compliant Answer | Yes |
Standard Guidance
EDUCAUSE provides no guidance here
Answering "NO"
Describe any plans to support automatic lock or log-out.
Answering "YES"
Describe the default behavior of this capability.
Reason for Question
This is a question to ensure account integrity and institutional data confidentiality.
Follow-Up Inquiries
Follow-up inquiries for inactivity protections will be institution/implementation specific.
HECVAT Pro Advice
[Add expert insights and best practices]
Implementation Tips
[Add practical steps for SME SaaS vendors]
FAQ
[Add common questions related to this HECVAT item]
Resources
[Add links to relevant articles or tools]