[SEC508] Session Timeouts and 1194.22(p)

["Rowland, Brian" <Brian_Rowland@sra.com>]

I’ve been wondering about session inactivity timeouts and 1194.22(p).  Based on a very small amount of research I’ve done, the industry approach seems to be to assert support for 22(p) and note the presence of a session inactivity timeout in the remarks field of the product VPAT.

Have any agencies put forth a position on this?  I would not consider silent session expirations an example of supporting the technical standard, but the ‘wisdom of the crowd’ seems to imply I am not in the majority.

 

Thanks,

 

Brian Rowland

User Interface Developer

SRA International, Inc.