Not implemented – risk acceptance sought Planned Alternative implementation – equivalence (explain below) Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> AC-3(4) What is the solution and how is it implemented? Part a Part b Part c Part d Part e AC-12 (1) – Session Termination| User-Initiated Logouts/Message Displays The information system: (a) Provides a logout capability for user-initiated communications sessions whenever authentication is used to gain access to [DoD Assignment: all resources]; and (b) Displays an explicit logout message to users indicating the reliable termination of authenticated communications sessions.
Not implemented – risk acceptance sought Planned Alternative implementation – equivalence (explain below) Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> AC-3(4) What is the solution and how is it implemented? Part a Part b Part c Part d Part e AC-12 (1) – Session Termination| User-Initiated Logouts/Message Displays The information system: (a) Provides a logout capability for user-initiated communications sessions whenever authentication is used to gain access to [DoD Assignment: all resources]; and (b) Displays an explicit logout message to users indicating the reliable termination of authenticated communications sessions.