V-222445
Application Security and Development Security Technical Implementation Guide
Title
The application must provide audit record generation capability for session timeouts.
Description
<VulnDiscussion>When a user's session times out, it is important to be able to identify these events in the application logs. Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident, or identify those responsible for one. Audit records can be generated from various components within the application (e.g., process, module). Certain specific application functionalities may be audited as well. The list of ...
Fix Text (Documentation Requirement)
Configure the application to record session timeout events in the logs.