Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue
AC: Access control – Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue

Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue AC-08: AC-08 System use notification

Before granting access the system displays an approved use notification that gives privacy and security notices consistent with law and policy, stating that users are on a GC system, that use may be monitored, recorded and audited, that unauthorized use is prohibited and subject to criminal and civil penalties, and, where personal information is collected, the personal information bank reference, the legal authority, the consequences of refusing, the rights of access, correction and protection, how the information will be used, and the right to complain to the Privacy Commissioner of Canada. The banner stays until the user acknowledges and acts to log on; publicly accessible systems display use information under set conditions, references to monitoring consistent with privacy accommodations, and a description of authorized uses. The GC discussion asks for privacy office input and legal review of banner text. No enhancements.

Maintained by Gerard Blokdyk

Other controls in AC: Access control – Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.