AC.L2-3.1.10  

Reference: CMMC 2.11

Family: AC

Level Introduced: 2

Title: Session Lock

Practice:
Use session lock with pattern-hiding displays to prevent access and viewing of data after a period of inactivity.

CMMC Clarification:
You can set session locks on your system. A user can enable the lock. Also, the system can enable it automatically after a preset time, for example, from one to five minutes. Session locks are a quick way to prevent unauthorized use of the systems without having a user log off.

A locked session shows pattern-hiding information on the machine screen. This masks the data on the display.

Example
You are the IT administrator in your organization. You notice that employees leave their offices without locking their computers. Sometimes their screens display sensitive company information. You remind your coworkers to lock their systems when they walk away. You set all machines to lock after five minutes of inactivity.

Source: CMMC v2.0