Title

The IBM z/OS system administrator (SA) must develop a process to notify appropriate personnel when accounts are modified. (Cat II impact)

Discussion

Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.

Check Content

Ask the SA for the documented process to notify appropriate personnel when accounts are modified. If there is no documented process, this is a finding.

Fix Text

Develop a documented develop a process to notify appropriate personnel when accounts are modified.

Additional Identifiers

Rule ID: SV-223763r998360_rule

Vulnerability ID: V-223763

Group Title: SRG-OS-000275-GPOS-00105

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.