BaselineWatch
Desk

AC-09(02) Successful and Unsuccessful Logons

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged AC part of AC-9

Title

Successful and Unsuccessful Logons

Control

Notify the user, upon successful logon, of the number of [Selection: successful logons; unsuccessful logon attempts; both] during [Assignment: time period].

Discussion

Information about the number of successful and unsuccessful logon attempts within a specified time period allows the user to recognize if the number and type of logon attempts are consistent with the user’s actual logon attempts.

Parameters

ac-09.02_odp.01: [successful logons; unsuccessful logon attempts; both]
ac-09.02_odp.02: time period

Assessment objective

AC-09(02) the user is notified, upon successful logon, of the number of [Selection: successful logons; unsuccessful logon attempts; both] during [Assignment: time period].

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).