UCF STIG Viewer Logo

IBM z/OS must employ a session manager to manage display of the Standard Mandatory DoD Notice and Consent Banner.


Overview

Finding ID Version Rule ID IA Controls Severity
V-223768 RACF-OS-000120 SV-223768r604139_rule Medium
Description
Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. All methods of gaining access to the system must comply with this requirement to assure that regulations are upheld.
STIG Date
IBM z/OS RACF Security Technical Implementation Guide 2021-07-05

Details

Check Text ( C-25441r514992_chk )
Verify that any session manger in use displays the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.

If the session manager does not display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system, this is a finding.
Fix Text (F-25429r514993_fix)
Configure any session manger in use to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.