A Pii Catalog stores sensitive data. Names, addresses, contact info, and more — all bound by compliance requirements. The longer a session stays open, the greater the attack surface. Session timeout enforcement cuts that window down, and the system applies the same precision to every account, every request, every interaction.
Timeout