Previous Logon Notification

frameworkNIST SP 800-53 Rev 5.2 sectionAC Access Control csf 2.0DE.CM-09 topics— frameworks1 0 2

Official textNotify the user, upon successful logon to the system, of the date and time of the last logon.NIST SP 800-53 Rev 5.2 control statement (public domain)

gap from 800-53 → gap to 800-53 →

Wrong or missing mapping? Report it

Equivalents of AC-9 in other frameworks
Framework	Requirement	Title	Link	Source / reason
NIST CSF 2.0	DE.CM-09	Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events	Loosely related	No mapping. Only shares CSF DE.CM-09: related, not a mapping
ISO 27001	A.8.5	Secure authentication	Crosswalk	NIST SP 800-53 → ISO 27001 mapping 4 loosely related (not mappings) A.8.6 Capacity management Loosely related Only shares CSF DE.CM-09: related, not a mapping A.8.16 Monitoring activities Loosely related Only shares CSF DE.CM-09: related, not a mapping A.8.1 User endpoint devices Loosely related Only shares CSF DE.CM-09: related, not a mapping A.8.7 Protection against malware Loosely related Only shares CSF DE.CM-09: related, not a mapping
CIS v8.1	CIS 10.1 CIS 2.6 CIS 2.7 CIS 9.1	Deploy and Maintain Anti-Malware Software; Allowlist Authorized Libraries…	Loosely related	No mapping. Only shares CSF DE.CM-09: related, not a mapping +11 more loosely related (not mappings) CIS 9.4 Restrict Unnecessary or Unauthorized Browser and Email Client Extensions Loosely related Only shares CSF DE.CM-09: related, not a mapping CIS 9.5 Implement DMARC Loosely related Only shares CSF DE.CM-09: related, not a mapping CIS 9.6 Block Unnecessary File Types Loosely related Only shares CSF DE.CM-09: related, not a mapping CIS 9.7 Deploy and Maintain Email Server Anti-Malware Protections Loosely related Only shares CSF DE.CM-09: related, not a mapping …and 7 more in the downloads
SOC 2	CC6.8 CC7.2	Preventing or detecting unauthorized or malicious software; Monitoring system components for anomalies	Loosely related	No mapping. Only shares CSF DE.CM-09: related, not a mapping
PCI DSS	5.2.1 5.2.2 5.3.2 6.4.3	Anti-malware deployed on system components; Anti-malware detects, removes or contains known malware…	Loosely related	No mapping. Only shares CSF DE.CM-09: related, not a mapping +5 more loosely related (not mappings) 10.3.4 File-integrity monitoring on logs Loosely related Only shares CSF DE.CM-09: related, not a mapping 11.3.1 Internal vulnerability scans every three months Loosely related Only shares CSF DE.CM-09: related, not a mapping 11.3.2 External ASV scans every three months Loosely related Only shares CSF DE.CM-09: related, not a mapping 5.4.1 Mechanisms to detect and protect against phishing Loosely related Only shares CSF DE.CM-09: related, not a mapping …and 1 more in the downloads
CMMC	AC.L2-3.1.3 AU.L2-3.3.3 CA.L2-3.12.3 CM.L2-3.4.2	Control CUI Flow; Event Review…	Loosely related	No mapping. Only shares CSF DE.CM-09: related, not a mapping +8 more loosely related (not mappings) CM.L2-3.4.3 System Change Management Loosely related Only shares CSF DE.CM-09: related, not a mapping CM.L2-3.4.9 User-Installed Software Loosely related Only shares CSF DE.CM-09: related, not a mapping SC.L2-3.13.3 Role Separation Loosely related Only shares CSF DE.CM-09: related, not a mapping SC.L2-3.13.7 Split Tunneling Loosely related Only shares CSF DE.CM-09: related, not a mapping …and 4 more in the downloads
HIPAA	§164.308(a)(1)(ii)(D)§164.308(a)(3)(ii)(A)§164.308(a)(4)(ii)(B)§164.308(a)(8)	Information System Activity Review; Authorization and/or Supervision…	Loosely related	No mapping. Only shares CSF DE.CM-09: related, not a mapping +5 more loosely related (not mappings) §164.310(b) Workstation Use Loosely related Only shares CSF DE.CM-09: related, not a mapping §164.312(c) Integrity Loosely related Only shares CSF DE.CM-09: related, not a mapping §164.312(c)(2) Mechanism to Authenticate Electronic Protected Health Information Loosely related Only shares CSF DE.CM-09: related, not a mapping §164.312(e)(2)(i) Integrity Controls Loosely related Only shares CSF DE.CM-09: related, not a mapping …and 1 more in the downloads
GDPR	—	No requirement	No mapping in our data	No mapping in our data (only GDPR's security articles are mapped, editorially).
NIS2	6.6 6.9	Security patch management; Protection against malicious and unauthorised software	Loosely related	No mapping. Only shares CSF DE.CM-09: related, not a mapping
Essential Eight	ISM-0109 ISM-0843 ISM-1228 ISM-1488	Event logs from workstations are analysed in a timely manner to detect cyber security…; Application control is implemented on workstations…	Loosely related	No mapping. Only shares CSF DE.CM-09: related, not a mapping +6 more loosely related (not mappings) ISM-1490 Application control is implemented on internet-facing servers Loosely related Only shares CSF DE.CM-09: related, not a mapping ISM-1544 Microsoft’s recommended application blocklist is implemented Loosely related Only shares CSF DE.CM-09: related, not a mapping ISM-1657 Application control restricts the execution of executables, libraries, scripts… Loosely related Only shares CSF DE.CM-09: related, not a mapping ISM-1870 Application control is applied to user profiles and temporary folders used by operating… Loosely related Only shares CSF DE.CM-09: related, not a mapping …and 2 more in the downloads
DORA	Art.9(1)Art.10(1)Art.10(3)	Protection and prevention; Detection…	Loosely related	No mapping. Only shares CSF DE.CM-09: related, not a mapping
CPS 234	—	No requirement	No mapping in our data	No mapping in our data (CPS 234 is principles-based and its links are editorial).
Cyber Essentials	CE 5	Malware protection	Loosely related	No mapping. Only shares CSF DE.CM-09: related, not a mapping

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.