STIGQter: STIG Summary: Soaring Software Solutions TCMax 9.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

TCMax must initiate a session lock after a 15-minute period of inactivity.

DISA Rule

SV-281366r1186136_rule

Vulnerability Number

V-281366

Group Title

SRG-APP-000003

Rule Version

TCMA-09-000002

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

1. Go to Settings >> Options.

2. Under "Login and User Options", check the box for "Automatically log user off after selected number of minutes.".

3. Set the "Number of minutes of idle time will log off the logged in user" to "15" or fewer.

4. Click "Save".

Check Contents

Using an account of appropriate privileges to access TCMax, go to Settings >> Options.

Under "Login and User Options", if "Automatically log user off after selected number of minutes." is not checked, and the "Number of minutes of idle time will log off the logged in user" is greater than 15, this is a finding.

Vulnerability Number

V-281366

Documentable

False

Rule Version

TCMA-09-000002

Severity Override Guidance

Using an account of appropriate privileges to access TCMax, go to Settings >> Options.

Under "Login and User Options", if "Automatically log user off after selected number of minutes." is not checked, and the "Number of minutes of idle time will log off the logged in user" is greater than 15, this is a finding.

Check Content Reference

M

Target Key

5734