AC-9(4): Additional Logon Information
CSF v1.1 References:
(Not part of any baseline)
- NIST Special Publication 800-53 Revision 5:
- AC-9(4): Additional Logon Information
The information system notifies the user, upon successful logon (access), of the following additional information: [Assignment: organization-defined information to be included in addition to the date and time of the last logon (access)].
This control enhancement permits organizations to specify additional information to be provided to users upon logon including, for example, the location of last logon. User location is defined as that information which can be determined by information systems, for example, IP addresses from which network logons occurred, device identifiers, or notifications of local logons.