Display the required CUI use / monitoring notice (login banner) where applicable.
What it actually means
Provide privacy and security notices consistent with applicable CUI rules — typically a logon banner stating acceptable-use and monitoring terms. Configure it on systems that handle CUI.
Pass or fail — an assessor needs a "yes" to each
- Do systems handling CUI display an approved use / security notice at logon where applicable?
What to have ready
- Screenshot or configuration of the logon banner
- Policy defining the notice content
Where teams trip up
- No banner on systems that should have one
- Banner text never defined in policy
See where this control puts your score
Run all 110 requirements free in about 10 minutes.
Calculate your SPRS score →