AC-9(1)

Requirement

Notify the user, upon successful logon, of the number of unsuccessful logon attempts since the last successful logon.

Discussion

Information about the number of unsuccessful logon attempts since the last successful logon allows the user to recognize if the number of unsuccessful logon attempts is consistent with the user's actual logon attempts.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing previous logon notification; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developers].

Test

[SELECT FROM: Mechanisms implementing access control policy for previous logon notification].

ID	Assessment Objectives
AC-09(01)	the user is notified, upon successful logon, of the number of unsuccessful logon attempts since the last successful logon.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!