{
    "stig": "Application_Security_Development_STIG",
    "stig-title": "Application Security and Development Security Technical Implementation Guide",
    "stig-description": "This Security Technical Implementation Guide is published as a tool to improve the security of Department of War (DoW) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via e-mail to the following address: disa.stig_spt@mail.mil.",
    "stig-status": "accepted",
    "stig-published": "2026-08-25",
    "id": "V-222437",
    "group": "SRG-APP-000075",
    "rule": "SV-222437r987626_rule",
    "severity": "low",
    "version": "APSC-DV-000580",
    "requirement-title": "The application must display the time and date of the users last successful logon.",
    "requirement-description": "Providing a last successful logon date and time stamp notification to the user when they authenticate and access the application allows the user to determine if their application account has been used without their knowledge. \n\nArmed with that information, the user can notify the application administrator and initiate a forensics investigation to identify root cause.  Without providing this information to the user, a potential compromise of user accounts could go unnoticed.",
    "identifiers": [
        "V-69355",
        "SV-83977",
        "CCI-000052"
    ],
    "check-id": "C-24107r493219_chk",
    "check-text": "Review the application documentation and interview the application administrator.\n\nIf the application does not provide a user interface, this requirement is not applicable.\n\nLogon to the application as a test user and verify successful authentication by creating test data, navigating the application functionality or otherwise utilizing the application.\n\nNote the date and time access was granted.\n\nLog out of the application.\n\nRe-authenticate to the application as the same user.\n\nValidate the last logon date and time is displayed in the user interface. \n\nIf the date and time the user account was last granted access to the application is not displayed in the user interface, this is a finding.",
    "fix-id": "F-24096r493220_fix",
    "fix-text": "Design and configure the application to display the date and time when the user was last successfully granted access to the application."
}