Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Access Control/83 of 1011

AC-11Device Lock

Control family: Access Control

Control description

a. Prevent further access to the system by [Selection (one or more): initiating a device lock after [Assignment: organization-defined time period] of inactivity; requiring the user to initiate a device lock before leaving the system unattended]; and

b. Retain the device lock until the user reestablishes access using established identification and authentication procedures.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.