An error occurred:

IBM z/OS ACF2 STIG

IBM z/OS ACF2 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
ACF2-JS-000090 V-223536 IBM z/OS Surrogate users must be controlled in accordance with proper security requirements. Cat II
ACF2-JS-000100 V-272874 IBM z/OS RJE workstations and NJE nodes must be defined to the FACILITY resource class. Cat II
ACF2-OS-000010 V-223537 The IBM z/OS BPX.SMF resource must be properly configured. Cat II
ACF2-OS-000030 V-223539 IBM z/OS Inapplicable PPT entries must be invalidated. Cat II
ACF2-OS-000040 V-223540 The IBM z/OS system administrator (SA) must develop a process notify appropriate personnel when accounts are removed. Cat II
ACF2-OS-000050 V-223541 The IBM z/OS system administrator (SA) must develop a process notify appropriate personnel when accounts are modified. Cat II
ACF2-OS-000060 V-223542 The IBM z/OS system administrator (SA) must develop a process notify appropriate personnel when accounts are deleted. Cat II
ACF2-OS-000070 V-223543 The IBM z/OS system administrator (SA) must develop a process notify appropriate personnel when accounts are created. Cat II
ACF2-OS-000080 V-223544 IBM z/OS Required SMF data record types must be collected. Cat II
ACF2-OS-000090 V-223545 IBM z/OS special privileges must be assigned on an as-needed basis to LOGONIDs associated with STCs and LOGONIDs that need to execute TSO in batch. Cat II
ACF2-OS-000100 V-223546 IBM z/OS must specify SMF data options to assure appropriate activation. Cat II
ACF2-OS-000110 V-223547 IBM z/OS SMF collection files (system MANx data sets or LOGSTREAM DASD) must have storage capacity to store at least one weeks worth of audit data. Cat II
ACF2-OS-000120 V-223548 IBM z/OS system administrators must develop an automated process to collect and retain SMF data. Cat II
ACF2-OS-000130 V-223549 IBM z/OS BUFUSEWARN in the SMFPRMxx must be properly set. Cat II
ACF2-OS-000140 V-223550 IBM z/OS NOBUFFS in SMFPRMxx must be properly set (Default is MSG). Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.