SEA-19
Previous Logon Notification
Description
Mechanisms exist to configure systems that process, store or transmit sensitive/regulated data to notify the user, upon successful logon, of the number of unsuccessful logon attempts since the last successful logon.
Control Question
Does the organization configure systems that process, store or transmit sensitive/regulated data to notify the user, upon successful logon, of the number of unsuccessful logon attempts since the last successful logon?
Control Metadata
Domain:
Secure Engineering & Architecture
Validation Cadence:
Annual