Title: The DBMS must notify users of organization defined security related changes to the users account occurring during the organization defined time period.
Vulnerability ID: V-32346
IA Controls: None
Description: Some organizations may define certain security events as events requiring user notification. An organization may define an event, such as a password change to a user’s account occurring outside of normal business hours, as a security related event requiring that the application user be notified. In those instances, where organizations define such events, the application must notify the affected user or users.
Unauthorized access to DBMS accounts may go undetected if account access is not monitored. Authorized users may serve as a reliable party to report unauthorized use of their account.
Check Text: Review system documentation to identify security related changes the organization has defined as requiring notification. Review DBMS settings, including triggers and custom jobs, to determine if organization defined security related changes during an organization defined time period would trigger a user notification. If organization defined security related changes do not trigger a notification to the user, this is a finding.
Fix Text: Utilize DBMS functionality or third party tools to alert users when organization defined security related changes to the user’s account occur during an organization defined time period.