AC-9(3): Notification Of Account Changes

Control Family:

Access Control

Parent Control:

AC-9: Previous Logon (Access) Notification

Priority:

P0: Security control not selected in any baseline.

CSF v1.1 References:

PR.AC-7

Threats Addressed:

Spoofing

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
AC-9(3): Notification of Account Changes

Control Statement

The information system notifies the user of changes to [Assignment: organization-defined security-related characteristics/parameters of the user’s account] during [Assignment: organization-defined time period].