I opened CPX and didn't do anything for 30 minutes. Suggest we automate a "Timer" reminder for 15 minutes (with a popup window) or window and a 60 second countdown) and then log them out if they don't hit a "continue" button. I think CPI dictates we have this type of controls over logout. (PCI-DSS 8.1.8) - https://www.pcisecuritystandards.org/documents/Prioritized-Approach-for-PCI_DSS-v3_2.pdf
Guest
