IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Hardware & Software Remarks
____________________________________________________________________ .........................................
S 4.2 Screen lock
Initiation responsibility: Head of IT Section, IT Security Management
Implementation responsibility: IT-user
Screen lock refers to the possibility of concealing information currently
displayed on the screen. Such a screen lock should be activated when the user
leaves the workstation for only a short time. Automatic activation of the
screen lock in case of a prolonged break period should be included as an
additional feature. If the software product also provides for password query,
access protection for the IT system will be additionally ensured during the
absence of the IT user concerned.
Password-supported screen lock is offered by MS Windows 3.x as a screen
saver. However, its documentation points out that if the current application is
a non-Windows application, the screen saver will not be activated
automatically, regardless of whether the application is executed in a window,
from the MS-DOS command line or as a symbol. Under Windows 95,
however, the screen saver will also be automatically activated when using
MS-DOS applications. Apart from MS Windows, there are other products
offering password-supported screen savers. Before employing such products,
it should be checked whether the screen lock will work under all applications.
Under UNIX, screen lock can be achieved with programs such as lock or,
under X Windows, lockscreen.
Additional controls:
- Has a screen lock been installed on the respective computers?
- Is consistent use being made of the screen lock feature?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000