id: "AC-09(03)" title: "Notification of Account Changes" family: "AC" family_name: "Access Control" sort_id: "ac-09.03" priority: "P1" implementation_level: "system" parent: "AC-09" enhancement: True
Statement
Notify the user, upon successful logon, of changes to {{ insert: param, ac-09.03_odp.01 }} during {{ insert: param, ac-09.03_odp.02 }}.
Guidance
Information about changes to security-related account characteristics within a specified time period allows users to recognize if changes were made without their knowledge.
Assessment Objective
the user is notified, upon successful logon, of changes to {{ insert: param, ac-09.03_odp.01 }} during {{ insert: param, ac-09.03_odp.02 }}.
Access control policy
procedures addressing previous logon notification
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
system developers
Mechanisms implementing access control policy for previous logon notification