Mechanisms exist to terminate remote sessions at the end of the session or after an organization-defined time period of inactivity.