{"data":{"id":"AC-09","name":"Previous Logon Notification","family":"AC","family_name":"Access Control","withdrawn":false,"description":"Notify the user, upon successful logon to the system, of the date and time of the last logon.","supplemental_guidance":"Previous logon notification is applicable to system access via human user interfaces and access to systems that occurs in other types of architectures. Information about the last successful logon allows the user to recognize if the date and time provided is not consistent with the user’s last access.","enhancements":[{"id":"AC-09(01)","name":"Unsuccessful Logons","statement":"Notify the user, upon successful logon, of the number of unsuccessful logon attempts since the last successful logon.","baselines":[]},{"id":"AC-09(02)","name":"Successful and Unsuccessful Logons","statement":"Notify the user, upon successful logon, of the number of [Selection (one): successful logons; unsuccessful logon attempts; both] during [Assignment: organization-defined time period].","baselines":[]},{"id":"AC-09(03)","name":"Notification of Account Changes","statement":"Notify the user, upon successful logon, of changes to [Assignment: organization-defined security-related characteristics or parameters of the user’s account] during [Assignment: organization-defined time period].","baselines":[]},{"id":"AC-09(04)","name":"Additional Logon Information","statement":"Notify the user, upon successful logon, of the following additional information: [Assignment: organization-defined additional information].","baselines":[]}],"baseline_low":false,"baseline_moderate":false,"baseline_high":false,"nist_800_53":{"rev5":{"id":"AC-09","name":"Previous Logon Notification","description":"Notify the user, upon successful logon to the system, of the date and time of the last logon.","discussion":"Previous logon notification is applicable to system access via human user interfaces and access to systems that occurs in other types of architectures. Information about the last successful logon allows the user to recognize if the date and time provided is not consistent with the user’s last access.","related_controls":["AC-07","PL-04"],"baseline_low":false,"baseline_moderate":false,"baseline_high":false,"baseline_privacy":false,"new_in_rev5":false,"changes_from_rev4":""}},"compliance_mappings":{"iso_27001_2022":["A.8.5"],"iso_27002_2022":[],"cobit_2019":["DSS05"],"pci_dss_v4":[],"nist_csf_2":["DE.CM-09"],"cis_controls_v8":[],"soc2_tsc":[],"finos_ccc":[],"iso_42001_2023":[],"iec_62443":[],"asd_e8":[],"nis2":["Art. 21(2)(i)"],"apra_cps_234":[],"mas_trm":["9"],"pra_op_resilience":[],"bsi_grundschutz":["ORP.4"],"anssi":["Hygiene.29","SecNumCloud.13.7"],"osfi_b13":["B-13.3.2"],"finma_circular":["IV.B.d(59)"],"gdpr":["Art.5(1)(f)","Art.32(1)(d)"],"dora":["Art.10(1)"],"bio2":[],"rbi_csf":[],"fisc":[],"lgpd_bcb":[],"hkma_tme1":[],"mlps_2":[],"dnb_good_practice":[],"cra":[],"swift_cscf":[],"qatar_nia":["AC"],"sama_csf":["3.1"],"uae_ia":["T9"],"bom_ctrm":["3.3"],"bot_cyber":["Ch2.2"],"ecb_croe":["CROE.2.3.1"],"ffiec_is":["II.C.15"],"iosco_cyber":["PROT-1"],"cmmc_2":["AC"],"nerc_cip":[],"nrc_73_54":[],"tsa_psd":[],"ieee_1686":[],"ferc_cip":[],"doe_c2m2":[],"api_1164":[],"awia":[],"iaea_nss":[],"pci_pts":[],"fips_140":[],"cbest":[],"tiber_eu":[],"pci_hsm":[],"common_criteria":[],"isae_3402":[],"fca_sysc_13":[],"fda_21_cfr_11":[],"fda_cyber":[],"hitrust_csf":["01.c"],"iso_27799":[],"lloyds_ms":[],"naic_ds":[],"nhs_dspt":[],"pra_ss1_23":[],"solvency_ii":[],"owasp_masvs_v2":[],"csa_ccm_v4":[],"csa_aicm":[],"ccss_v9":[],"mica":[],"basel_sco60":[],"bssc":[],"sec_custody_digital":[],"dpdpa":[]},"attack_techniques":[],"metadata":{"last_reviewed":"2026-10-03","review_notes":"2026-10-02: iso_27001_2022 clauses taken from NIST's SP 800-53 Rev 5 to ISO/IEC 27001:2022 crosswalk (OLIR, v1.0.0). OSA had none. 2026-10-03: nist_csf_2 DE.CM-09 added from NIST's CSF 2.0 to SP 800-53 Rev 5.2.0 crosswalk (OLIR entry 186), which OSA's mapping now takes as its base. 2026-10-03: baselines LMH to ---, from NIST SP 800-53B Release 5.2.0.","mapping_status":"complete"},"function":"preventative","used_by_patterns":["SP-002","SP-008"]}}