Requirement:

If remote access is authorized for use in the IACS, the asset owner shall have policies and procedures around terminating all interactive remote access connections after a configured inactivity period.

Guidance: