An error occurred:

IBM z/OS ACF2 STIG

IBM z/OS ACF2 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
ACF2-OS-000330 V-223568 IBM z/OS must use ICSF or SAF Key Rings for key management. Cat II
ACF2-OS-000340 V-223569 The IBM z/OS systems requiring data at rest protection must properly employ IBM DS8880 or equivalent hardware solutions for full disk encryption. Cat I
ACF2-OS-000350 V-223570 IBM z/OS sensitive and critical system data sets must not exist on shared DASD. Cat II
ACF2-OS-000360 V-223571 IBM z/OS Policy agent must contain a policy that protects against or limits the effects of Denial of Service (DoS) attacks by ensuring the operating system is implementing rate-limiting measures on impacted network interfaces. Cat II
ACF2-OS-000370 V-223572 IBM z/OS Policy agent must contain a policy that manages excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of Denial of Service (DoS) attacks. Cat II
ACF2-OS-002240 V-223573 IBM z/OS must employ a session manager to manage retaining a users session lock until that user reestablishes access using established identification and authentication procedures. Cat II
ACF2-OS-002330 V-223574 IBM z/OS system administrator must develop a procedure to notify designated personnel if baseline configurations are changed in an unauthorized manner. Cat II
ACF2-OS-002350 V-223575 IBM z/OS must employ a session manager that conceal, via the session lock, information previously visible on the display with a publicly viewable image. Cat II
ACF2-OS-002360 V-223576 IBM z/OS must employ a session manager to manage session lock after a 15-minute period of inactivity. Cat II
ACF2-OS-002370 V-223577 The IBM z/OS system administrator (SA) must develop a procedure to automatically remove or disable temporary user accounts after 72 hours. Cat II
ACF2-OS-002380 V-223578 IBM z/OS system administrator must develop a procedure to automatically remove or disable emergency accounts after the crisis is resolved or 72 hours. Cat II
ACF2-OS-002390 V-223579 IBM z/OS system administrator must develop a procedure to notify system administrators (SAs) and information system security officers (ISSOs) of account enabling actions. Cat II
ACF2-OS-002420 V-223581 IBM z/OS system administrator must develop a procedure to remove all software components after updated versions have been installed. Cat II
ACF2-OS-002430 V-223582 IBM z/OS system administrator must develop a procedure to shut down the information system, restart the information system, and/or notify the system administrator when anomalies in the operation of any security functions are discovered. Cat II
ACF2-OS-002440 V-223583 IBM z/OS must employ a session manager configured for users to directly initiate a session lock for all connection types. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.