The IBM z/OS System Administrator (SA) must develop a process to notify appropriate personnel when accounts are modified.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-98233	RACF-OS-000070	SV-107337r1_rule		Medium

Description
Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.

STIG	Date
IBM z/OS RACF Security Technical Implementation Guide	2020-06-29

Details

Check Text ( C-97069r1_chk )
Ask the system Administrator for the documented process to notify appropriate personnel when accounts are modified. If there is no documented process, this is a finding.

Fix Text (F-103909r1_fix)
Develop a documented develop a process to notify appropriate personnel when accounts are modified.