Educause Security Discussion mailing list archives

Re: Screensaver Timeouts


From: Aaron Wade <agw8 () CORNELL EDU>
Date: Tue, 13 Sep 2005 14:33:09 -0400

Our facility uses the winexit.scr logoff screensaver as was mentioned by Aaron 
Childs.  Our timeout is 15 minutes.
-Aaron

-- 
Aaron Wade
Manager, Academic Computing
ACCEL
Cornell University

On Tuesday 13 September 2005 02:30 pm, Penn, Blake wrote:
Neal:

We recommend a 15 minute maximum timeout.  This is the same value as
specified in the draft NIST Windows XP Guidelines (NIST 800-68).  That
being said, we couldn't find any other NIST documents specifying anything
more specific than "a predetermined amount of time."

I would like to see specific times mentioned in guidance documents if
anyone else is aware of any.

__________________________________
Blake Penn, CISSP
Information Security Officer
University of Wisconsin-Whitewater
(p) 262-472-5513 (f) 262-472-1285
e-mail: pennb () uww edu


-----Original Message-----
From: Clonts, Neal D. (HSC) [mailto:Neal-Clonts () OUHSC EDU]
Sent: Tuesday, September 13, 2005 1:01 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Screensaver Timeouts

Fellow Security Professionals,

Our campus is looking at implementing a policy for screensaver timeouts and
we are wondering if anyone else currently has this type of policy in place.
If you do have a policy on screensaver timeouts, how many minutes do you
require before the screensaver is activated?

Neal Clonts, CISSP, CISA, MCP
Information Security Services
University of Oklahoma Health Sciences Center Office Phone: 405-271-2476,
Option 2 Cell Phone: 405-255-2999
Website: http://security.ouhsc.edu <http://security.ouhsc.edu/>


Attachment: _bin
Description:


Current thread: