This objective verifies that your systems are configured to automatically terminate sessions based on predefined conditions—such as inactivity, logout, or disconnection—and that this behavior aligns with your documented policy or standards.