💼 AC-8 System Use Notification
- Contextual name: 💼 AC-8 System Use Notification
- ID:
/frameworks/nist-sp-800-53-r5/ac/08
- Located in: 💼 AC Access Control
Description
a. Display [Assignment: organization-defined system use notification message or banner] to users before granting access to the system that provides privacy and security notices consistent with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines and state that:
- Users are accessing a U.S. Government system;
- System usage may be monitored, recorded, and subject to audit;
- Unauthorized use of the system is prohibited and subject to criminal and civil penalties; and
- Use of the system indicates consent to monitoring and recording;
b. Retain the notification message or banner on the screen until users acknowledge the usage conditions and take explicit actions to log on to or further access the system; and
c. For publicly accessible systems:
- Display system use information [Assignment: organization-defined conditions], before granting further access to the publicly accessible system;
- Display references, if any, to monitoring, recording, or auditing that are consistent with privacy accommodations for such systems that generally prohibit those activities; and
- Include a description of the authorized uses of the system.
Similar
Similar Sections (Give Policies To)
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|