Check “Session Times Out After” in Profile’s Session Settings.

We can control Session Time Out on a user profile basis. When the profile is created it takes the default values from cloned profile. So, adjust it based on your company’s security policies.