z/OS BMC CONTROL-O for ACF2 STIG Version Comparison

There are 9 differences between versions v6 r8 (Nov. 23, 2022) (the "left" version) and v7 r2 (Oct. 1, 2025) (the "right" version).

Check ZCTO0040 was changed between these two versions. Green, underlined text was added, red, struck-out text was removed.

The regular view of the left check and right check may be easier to read.

Title

BMC CONTROL-O configuration/parameter values are not specified properly.

Check Content

Refer to the following applicable reports produced by the z/OS Data Collection: - Collection: - IOA.RPT(SECPARM) Automated IOA.RPT(SECPARM). Automated Analysis Refer to the following report produced by the z/OS Data Collection: - PDI(ZCTO0040) The Collection: - PDI(ZCTO0040). The following keywords will have the specified values in the BMC CONTROL-O security parameter member. This is not a member: Keyword Value DEFMCHKO $$CTOEDM SECTOLO NO DFMO01 EXTEND DFMO02 EXTEND DFMO03 EXTEND DFMO04 EXTEND DFMO08 EXTEND DFMO10 PROD finding. Keyword Value DEFMCHKO $$CTOEDM SECTOLO NO DFMO01 EXTEND DFMO02 EXTEND DFMO03 EXTEND DFMO04 EXTEND DFMO08 EXTEND DFMO10 PROD (new for 6.3.xx) DFMO15 EXTEND

Discussion

BMC CONTROL-O configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be weakened. This exposure may threaten the availability of the product applications, and compromise the confidentiality of customer data.

Fix

The BMC CONTROL-O systems programmer will verify that any configuration/parameters that are required to control the security of the product are properly configured and syntactically correct. Set the standard values for the BMC CONTROL-O security parameters for the specific Access Control Program (ACP) environment along with additional IOA security parameters with standard values as documented below. Keyword Value DEFMCHKO $$CTOEDM SECTOLO NO DFMO01 EXTEND DFMO02 EXTEND DFMO03 EXTEND DFMO04 EXTEND DFMO08 EXTEND DFMO10 PROD (new for 6.3.xx) DFMO15 EXTEND