https://ones.com/blog/knowledge/nist-session-timeout-control-enhancing-system-security/