What is the maximum allowed idle time before CJIS sessions must require reauthentication?

The maximum allowed idle time before CJIS sessions must require reauthentication is 15 minutes. This policy is in place to enhance security and safeguard sensitive criminal justice information. When an individual is logged into a session that remains idle for too long, the potential for unauthorized access increases significantly. By implementing a reauthentication requirement every 15 minutes, CJIS ensures that any user who has left their session unattended must verify their identity to continue using the system. This practice aligns with the overarching goal of maintaining the confidentiality, integrity, and availability of criminal justice data, effectively reducing the risk of data breaches or unauthorized information access.