Re: Timeout for Learning Management Systems

[Sue Contarino <scontari () HARPERCOLLEGE EDU>]

We have a 15 minute timeout across the board that was implemented about a year and a half ago. We had a lot of push 
back the first month, I haven’t heard a peep since.

Sue Contarino
Director, Client Services
Information Technology
Phone: 847 925 6200
Fax: 847 925 6030
1200 W. Algonquin Road
Palatine, Illinois 60067

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Miguel 
Hernandez
Sent: Thursday, October 08, 2015 5:42 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Timeout for Learning Management Systems

Colleagues,

My team has been receiving some pushback lately for our 20 minute inactivity timeout for our LMS (Instructure Canvas) 
and was wondering what timeout values you are using.  While it is common practice to see 10,15 or even 20 minute 
timeout values for endpoints, I'm trying to get a feeling if our 20 minute timeout is too short, too long, or just 
right.  Thanks in advance.

[Maricopa Community Colleges. The college of you.]<http://www.maricopa.edu/>

Miguel Hernandez IV, Ph.D, CISSP, CISA

Associate Vice Chancellor ITS, Chief Information Security Officer

 "Information Security is Everybody's Responsibility"

This message contains information which may be confidential and/or privileged. If you are not the intended recipient of 
this message, please notify the sender, delete and do not use or disseminate this information.