Re: Timeout for Learning Management Systems

[Robert J Russo <rrusso () LSU EDU>]

We set ours to 60 minutes for editing a single post and 4hrs of inactivity for session timeout.

Thank you for everything you do.

--
Robert Russo
Moodle Project Manager
User Interface Designer
User Support & Student IT Enablement
Louisiana State University
200 Frey Computing Services Center, Baton Rouge, La  70726
office 225-578-0022<tel:225-578-0022> | mobile 225-910-8253<tel:225-910-8253>
rrusso () lsu edu<mailto:rrusso () lsu edu> | lsu.edu<http://www.lsu.edu/>

On Oct 9, 2015, at 9:26 AM, Mike Budzik <mikeb () PURDUE EDU<mailto:mikeb () purdue edu>> wrote:

I can definitely picture students taking 25 minutes to type up a discussion post or read an article in a course.  By 
the time they submit their post or finish that article their session has expired if you have a 15 or 20 minute timeout. 
 Does the post get lost if the user session timed out while they were writing it?  We have a 90 minute inactivity 
timeout in our LMS.

Mike B

Mike Budzik
Interim Manager, Student Systems and Web Services Admin
IT Infrastructure - Purdue University





On Fri, Oct 9, 2015 at 9:36 AM, Sue Contarino <scontari () harpercollege edu<mailto:scontari () harpercollege edu>> 
wrote:
We have a 15 minute timeout across the board that was implemented about a year and a half ago. We had a lot of push 
back the first month, I haven't heard a peep since.

Sue Contarino
Director, Client Services
Information Technology
Phone: 847 925 6200<tel:847%20925%206200>
Fax: 847 925 6030<tel:847%20925%206030>
1200 W. Algonquin Road
Palatine, Illinois 60067

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>] On Behalf Of Miguel Hernandez
Sent: Thursday, October 08, 2015 5:42 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Timeout for Learning Management Systems

Colleagues,

My team has been receiving some pushback lately for our 20 minute inactivity timeout for our LMS (Instructure Canvas) 
and was wondering what timeout values you are using.  While it is common practice to see 10,15 or even 20 minute 
timeout values for endpoints, I'm trying to get a feeling if our 20 minute timeout is too short, too long, or just 
right.  Thanks in advance.

[Maricopa Community Colleges. The college of you.]<http://www.maricopa.edu/>

Miguel Hernandez IV, Ph.D, CISSP, CISA

Associate Vice Chancellor ITS, Chief Information Security Officer

 "Information Security is Everybody's Responsibility"

This message contains information which may be confidential and/or privileged. If you are not the intended recipient of 
this message, please notify the sender, delete and do not use or disseminate this information.