The organization should implement this requirement through technical controls for all interactive-use endpoints.
Configure all relevant interactive-use endpoints to require an automatic lock screen.