...
Note 2: Cornell's IT Security Policy (pgp.16) recommends, "For any computer system that is not in a secure, private space, run a password-protected screen saver, or some other console-locking mechanism, that is triggered after fifteen minutes (or less) of inactivity."
...