The IBM z/OS System Administrator (SA) must develop a process to notify appropriate personnel when accounts are modified.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-223763	RACF-OS-000070	SV-223763r604139_rule		Medium

Description
Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.

STIG	Date
IBM z/OS RACF Security Technical Implementation Guide	2022-01-05

Details

Check Text ( C-25436r514977_chk )
Ask the system Administrator for the documented process to notify appropriate personnel when accounts are modified. If there is no documented process, this is a finding.

Fix Text (F-25424r514978_fix)
Develop a documented develop a process to notify appropriate personnel when accounts are modified.