Re: Timeout for Learning Management Systems

[Mike Budzik <mikeb () PURDUE EDU>]

I can definitely picture students taking 25 minutes to type up a discussion
post or read an article in a course.  By the time they submit their post or
finish that article their session has expired if you have a 15 or 20 minute
timeout.  Does the post get lost if the user session timed out while they
were writing it?  We have a 90 minute inactivity timeout in our LMS.

Mike B

Mike Budzik
Interim Manager, Student Systems and Web Services Admin
IT Infrastructure - Purdue University





On Fri, Oct 9, 2015 at 9:36 AM, Sue Contarino <scontari () harpercollege edu>
wrote:

> We have a 15 minute timeout across the board that was implemented about a
> year and a half ago. We had a lot of push back the first month, I haven’t
> heard a peep since.
>
>
>
> Sue Contarino
>
> Director, Client Services
>
> Information Technology
>
> Phone: 847 925 6200
>
> Fax: 847 925 6030
>
> 1200 W. Algonquin Road
>
> Palatine, Illinois 60067
>
>
>
> *From:* The EDUCAUSE Security Constituent Group Listserv [mailto:
> SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Miguel Hernandez
> *Sent:* Thursday, October 08, 2015 5:42 PM
> *To:* SECURITY () LISTSERV EDUCAUSE EDU
> *Subject:* [SECURITY] Timeout for Learning Management Systems
>
>
>
> Colleagues,
>
>
>
> My team has been receiving some pushback lately for our 20 minute
> inactivity timeout for our LMS (Instructure Canvas) and was wondering what
> timeout values you are using.  While it is common practice to see 10,15 or
> even 20 minute timeout values for endpoints, I'm trying to get a feeling if
> our 20 minute timeout is too short, too long, or just right.  Thanks in
> advance.
>
>
> [image: Maricopa Community Colleges. The college of you.]
> <http://www.maricopa.edu/>
>
> *Miguel Hernandez IV, Ph.D, CISSP, CISA*
>
> Associate Vice Chancellor ITS, Chief Information Security Officer
>
>  *"Information Security is Everybody's Responsibility"*
>
> This message contains information which may be confidential and/or
> privileged. If you are not the intended recipient of this message, please
> notify the sender, delete and do not use or disseminate this information.