Re: Screensaver Timeouts

["Penn, Blake" <pennb () UWW EDU>]

Neal:

We recommend a 15 minute maximum timeout.  This is the same value as
specified in the draft NIST Windows XP Guidelines (NIST 800-68).  That being
said, we couldn't find any other NIST documents specifying anything more
specific than "a predetermined amount of time."

I would like to see specific times mentioned in guidance documents if anyone
else is aware of any.

__________________________________
Blake Penn, CISSP
Information Security Officer
University of Wisconsin-Whitewater
(p) 262-472-5513 (f) 262-472-1285
e-mail: pennb () uww edu


-----Original Message-----
From: Clonts, Neal D. (HSC) [mailto:Neal-Clonts () OUHSC EDU]
Sent: Tuesday, September 13, 2005 1:01 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Screensaver Timeouts

Fellow Security Professionals,

Our campus is looking at implementing a policy for screensaver timeouts and
we are wondering if anyone else currently has this type of policy in place.
If you do have a policy on screensaver timeouts, how many minutes do you
require before the screensaver is activated?

Neal Clonts, CISSP, CISA, MCP
Information Security Services
University of Oklahoma Health Sciences Center Office Phone: 405-271-2476,
Option 2 Cell Phone: 405-255-2999
Website: http://security.ouhsc.edu <http://security.ouhsc.edu/>

Attachment: smime.p7s
Description: