by Heath Gieson Some attacks are sophisticated. Weeks of reconnaissance, carefully crafted phishing emails, vulnerabilities quietly exploited in the background. But some of the easiest wins for an attacker require nothing more than a moment of opportunity and an unlocked screen. CIS Control 4.3 is about closing that window. General-purpose devices must lock after no more than 15 minutes of inactivity. Mobile devices drop to 2 minutes. The requirement is simple. What makes it worth talking...















