Conceal, via the device lock, information previously visible on the display with a publicly viewable image.
AC-11 Part a
Pass
Prevent further access to the system by [ initiating a device lock after [time period] of inactivity | requiring the user to initiate a device lock before leaving the system unattended ].
AC-11 Part b
Pass
Retain the device lock until the user reestablishes access using established identification and authentication procedures.