Applications must notify users of organization defined security-related changes to the user's account occurring during the organization defined time period.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36222	SRG-APP-079-NA	SV-47626r1_rule		Medium

Description
Some organizations may define certain security events as events requiring user notification. An organization may define an event such as a password change to a user's account occurring outside of normal business hours as a security-related event requiring that the application user be notified. In those instances, where organizations define such events, the application must notify the affected user or users. Rationale for non-applicability: The MDM server has no user accounts, only administrators.

Description

Some organizations may define certain security events as events requiring user notification. An organization may define an event such as a password change to a user's account occurring outside of normal business hours as a security-related event requiring that the application user be notified. In those instances, where organizations define such events, the application must notify the affected user or users. Rationale for non-applicability: The MDM server has no user accounts, only administrators.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44462r1_chk )
This requirement is NA for the MDM server SRG.

Fix Text (F-40752r1_fix)
The requirement is NA. No fix is required.