The IBM z/OS systems requiring data at rest protection must properly employ IBM DS8880 for full disk encryption. (Cat II impact)
Information at rest refers to the state of information when it is located on a secondary storage device (e.g., disk drive and tape drive, when used for backups) within an operating system.
Determine if IBM's DS880 disks are in use. If they are not in use for systems that require data at rest, this is a finding.
Employ IBM's DS8880 hardware to ensure full disk encryption.
The information system protects the confidentiality and/or integrity of organization-defined information at rest.
Protection Of Information At Rest