Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.1.9

Provide Privacy and Security Notices

Official citation: 3.1.9

Class: core · Severity: medium

Statement of the obligation — verify against source

3.1.9

What it means

Display an approved privacy and security notice — typically a warning banner — before login on systems that handle CUI, stating authorized-use and monitoring terms. Notices apply to human logon interfaces (not machine-to-machine connections), and a risk assessment may call for a secondary notice before reaching certain applications. Have the Office of General Counsel review and approve the banner wording.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.