This check applies to any mobile OS device (smartphones, tablets, etc.).
Check a sample of 2-3 devices managed by the site to verify a device inactivity timeout has been set to 60 minutes or less (15 minutes is recommended). The exact procedure will vary, depending on the mobile OS.
Have the user show that a device inactivity timeout has been set to 60 minutes or less.
Mark as a finding if configuration is not set as required.
Fix Text (F-27661r1_fix)
Set the smartphone inactivity timeout to required value.