STIGQter: STIG Summary: IBM Hardware Management Console (HMC) STIG Version: 1 Release: 5 Benchmark Date: 20 Jan 2015:

The terminal or workstation must lock out after a maximum of 15 minutes of inactivity, requiring the account password to resume.

DISA Rule

SV-30029r2_rule

Vulnerability Number

V-24361

Group Title

HMC0150

Rule Version

HMC0150

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

The System Administrator will display the User Properties window and will ensure that the Verify timeout minutes are set to a maximum of 15.

Check Contents

Have the System Administrator display the User Properties window on the Hardware Management Console and check that the timeout minutes are set to a maximum of 15.

If the Verify Timeout minutes are set to more than 15, then this is a FINDING.

Vulnerability Number

V-24361

Documentable

False

Rule Version

HMC0150

Severity Override Guidance

Have the System Administrator display the User Properties window on the Hardware Management Console and check that the timeout minutes are set to a maximum of 15.

If the Verify Timeout minutes are set to more than 15, then this is a FINDING.

Check Content Reference

M

Responsibility

Systems Programmer

Target Key

1891

Comments