The operating system must notify the user of organization-defined security-related changes to the user’s account that occur during the organization-defined time period.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-28895	SRG-OS-000235	SV-36886r1_rule		Medium

Description
Some organizations may define certain security events as events requiring user notification. An organization may define an event such as a password change to a user's account occurring outside of normal business hours as a security related event that requires the user be notified. In those instances where organizations define such events, the operating system must notify the affected user or users.

Description

Some organizations may define certain security events as events requiring user notification. An organization may define an event such as a password change to a user's account occurring outside of normal business hours as a security related event that requires the user be notified. In those instances where organizations define such events, the operating system must notify the affected user or users.

STIG	Date
Operating System Security Requirements Guide	2013-03-28

Details

Check Text ( None )
None

Fix Text (None)
None