This control requires your organization to ensure that network sessions—especially those involving Controlled Unclassified Information (CUI)—are automatically ended when the session concludes or after a period of inactivity, to reduce exposure and prevent unauthorized access.