Skip to content

The UEM server must notify the user, upon successful logon (access) to the application, of the date and time of the last logon (access).

An XCCDF Rule

Description

<VulnDiscussion>Users need to be aware of activity that occurs regarding their application account. Providing users with information regarding the date and time of their last successful login allows the user to determine if any unauthorized activity has occurred and gives them an opportunity to notify administrators. This requirement is intended to cover both traditional interactive logons to information systems and general accesses to information systems that occur in other types of architectural configurations (e.g., service-oriented architectures).</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID
SV-234315r879551_rule
Severity
Medium
References
Updated



Remediation - Manual Procedure

Configure the UEM server to notify the user, upon successful logon (access) to the application, of the date and time of the last logon (access).