Young hacker smiling

We hack your software

zero false positives

Expert intelligence + specialized technology

REQ.301 Notify configuration changes

This document contains the details of the security requirements related to the definition and management of sensitive data in the organization. This requirement establishes the importance of notifying the users when there are modifications in authentication mechanisms or security settings.

Requirement

The system must notify the users when modifications are made in their authentication mechanisms or other security settings.

References

  1. NIST 800-53 AC-2 (4) The information system automatically audits account creation, modification, enabling, disabling, and removal actions, and notifies [Assignment: organization-defined personnel or roles].


Service status - Terms of Use