Check: IDMS-DB-000440
CA IDMS STIG:
IDMS-DB-000440
(in versions v1 r2 through v1 r1)
Title
IDMS executing in a local mode batch environment must be able to manually recover or restore database areas affected by failed transactions. (Cat III impact)
Discussion
Local mode update jobs can either use local mode journaling or perform a backup of the database prior to executing the local mode updates. Local mode journaling could be completed if the database is too large to back up in a reasonable amount of time. To use local mode journals for manual recovery, the journals must be defined in the IDMS DMCL as a TAPE JOURNAL and a DD for the journal file must be coded in the update job step JCL. The local mode update job must include the IDMS DMCL name in the SYSIDMS parameter file as DMCL=dmcl-name. If the local mode update step fails, then a rollback step must be performed to recover the database. Without local mode journaling, the local mode batch job should include a backup of the database step, a local mode update step and another backup of the database step if the local updates step successfully complete. If the local mode update step fails, then a step to restore the database from the first backup step must be performed. Satisfies: SRG-APP-000225-DB-000153, SRG-APP-000226-DB-000147
Check Content
Check that the job or prior job contains a step to vary the areas offline to the CV and takes a backup. If not there, it is a finding. Perform a second check to verify there is a restore step or JCL that can be used when the job fails.
Fix Text
Add a backup step/job if needed and create a restore step/job if needed.
Additional Identifiers
Rule ID: SV-251616r807715_rule
Vulnerability ID: V-251616
Group Title: SRG-APP-000225-DB-000153
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001190 |
The information system fails to an organization-defined known-state for organization-defined types of failures. |
CCI-001665 |
The information system preserves organization-defined system state information in the event of a system failure. |
Controls
Number | Title |
---|---|
SC-24 |
Fail In Known State |