Der skal fastlægges procedurer i sikkerhedspolitikken for log-in/log-off for at forhindre uautoriseret adgang.
Procedures shall be defined in the Security Policy for logging in and out to prevent any unauthorised access.