Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-223585 | ACF2-OS-003430 | SV-223585r533198_rule | Medium |
Description |
---|
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity. |
STIG | Date |
---|---|
IBM z/OS ACF2 Security Technical Implementation Guide | 2022-01-05 |
Check Text ( C-25258r500890_chk ) |
---|
Ask the system administrator for the procedure to offload SMF files to a different system or media than the system being audited. If the procedure does not exist, this is a finding. |
Fix Text (F-25246r500891_fix) |
---|
Develop a procedure to offload SMF files to a different system or media than the system being audited. |