+AC-09(03) Notification of Account Changes
|
AC-09(03) Notification of Account Changes
Control
Notify the user, upon successful logon, of changes to [Assignement: security-related characteristics or parameters] during [Assignement: time period].
Discussion
Information about changes to security-related account characteristics within a specified time period allows users to recognize if changes were made without their knowledge.
Assessment Objective
the user is notified, upon successful logon, of changes to [Assignement: security-related characteristics or parameters] during [Assignement: time period].
Assessment Method
Examine
Access control policy
procedures addressing previous logon notification
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
system developers
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|