Educause Security Discussion mailing list archives

Re: Locking Computer Policy


From: Tom Miller <thomas.miller () CNU EDU>
Date: Thu, 2 May 2019 08:17:37 -0400

15 minutes here a well.  In my department (internal audit), we also sign a
statement annually, part of which indicates that the screen lock should be
engaged if the employee leaves his or her desk.  We also have adopted NIST
controls which specify application/screen locks.

On Wed, May 1, 2019 at 6:44 PM Ronald Loneker <rloneker () cse edu> wrote:

Hi Everyone -

We looking to set up a group policy to push out to some of our end users
to automatically lock a computer after a certain period of inactivity -
especially in departments that have elevated privileges or access to
sensitive data.

We are noticing some people not following procedure on this, and we want
to take action.

What best practices are you using at your institution in terms of the
amount of time before a computer locks automatically during inactivity?

Thanks in advance for your thoughts on this.

Ron Loneker, Jr.
Director, IT Special Projects
College of Saint Elizabeth
Mahoney Library
2 Convent Road
Morristown, NJ  07960

Phone:  973-290-4229

e-mail:  rloneker () cse edu



*CSE's IT department will never ask for your password, social security
number or other personal information in an e-mail message.*
*Please do not share any information with others!*







-- 
Tom Miller, MBA
Internal IT Auditor
Christopher Newport University
1 Avenue of the Arts
Newport News, VA  23606-3072
Phone:  757-594-8610
E-mail:  thomas.miller () cnu edu

Current thread: