expected inactivity
163504·updated Aug 30, 2026No definition recorded.
Composition
Source
] of expected inactivity or when [ Assignment: organization-defined circumstances ].the sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
A policy threshold — either a duration or a described condition — that an organization defines to represent a session or period during which a user is not expected to interact with a system. It functions as the trigger criterion in session-management controls: NIST SP 800-53 AC-2(5) requires that "users log out when [Assignment: organization-defined time period of expected inactivity or description of when to log out]." The concept is intentionally broader than a simple countdown timer: the organization may supply either an "organization-defined time-period of expected inactivity" or a "description of when to log out," accommodating both quantitative thresholds and qualitative, scenario-based conditions. The control is behavior- or policy-based and requires users to take physical action to log out when they are expecting inactivity longer than the defined period.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.