To what does everyone set QINACTIVE to autolog off inactive users?

I'm used to security being taken seriously in the mainframe world where
inactive users were logged off in fairly short order.   This in addition
to many other security standards and policies to protect company and
customer data.   Is this the same in the minicomputer/iSeries world of
today, especially if taking credit card numbers, SSNs and other
sensitive customer data?  If so, what's the answer to the subject line
question?  

Thanks in advance,

Dave 
Arizona