id: "AC-09(04)" title: "Additional Logon Information" family: "AC" family_name: "Access Control" sort_id: "ac-09.04" priority: "P1" implementation_level: "system" parent: "AC-09" enhancement: True
Statement
Notify the user, upon successful logon, of the following additional information: {{ insert: param, ac-09.04_odp }}.
Guidance
Organizations can specify additional information to be provided to users upon logon, including the location of the last logon. User location is defined as information that can be determined by systems, such as Internet Protocol (IP) addresses from which network logons occurred, notifications of local logons, or device identifiers.
Assessment Objective
the user is notified, upon successful logon, of {{ insert: param, ac-09.04_odp }}.
Access control policy
procedures addressing previous logon notification
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
system developers
Mechanisms implementing access control policy for previous logon notification