Title

Batch ACID(s) submitted through RJE and NJE is (are) not sourced. (Cat II impact)

Discussion

Jobs submitted through the RJE or NJE process will be sourced for submission to restrict the ACID so it can only be used from a specific remote number. This ensures that integrity is maintained. Without source restrictions, there is the potential job streams could be submitted from unauthorized locations.

Check Content

a) Refer to the following report produced by the TSS Data Collection: - TSSCMDS.RPT(@ACIDS) Refer to the list of NJE/RJE batch jobs and each of the associated userids. b) Refer to data obtained from the site installation identifying batch type ACIDs. Ensure that all static batch ACIDs (ACIDs whose passwords never change) originating from a physical reader, RJE, or NJE are sourced to those readers such as (INTRDR, N12.IR, etc) with the appropriate source Syntax. c) If (b) above is complete, there is NO FINDING. d) If (b) above is incomplete, this is a FINDING.

Fix Text

Ensure that all static batch ACIDs (ACIDs whose passwords never change) originating from a physical reader, RJE, or NJE are sourced to those readers such as (INTRDR, N12.IR, etc) with the appropriate source Syntax. Example: TSS ADD(batch-acid) SOURCE(device) Develop a plan of action and implement the changes as specified

Additional Identifiers

Rule ID: SV-231r2_rule

Vulnerability ID: V-231

Group Title: TSS0830

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.