358 – Notify upcoming expiration dates

Summary

The system must notify users when their credentials are about to expire.

Description

This requirement specifies that users must be notified when their credentials are about to expire. This is a proactive security measure that promotes user awareness, encourages timely credential updates, and contributes to the overall security of the system. The notification should include clear instructions on how users can change or update their credentials.

Supported In

Advanced: True

References

• CMMC-AC_L2-3_1_9. Privacy & security notices
• FEDRAMP-SI-5. Security alerts, advisories, and directives
• IEC62443-IAC-1_12. System use notification
• OWASPRISKS-P8. Missing or insufficient session expiration

Last updated

2024/01/18