The IBM z/OS system administrator (SA) must develop a process to notify appropriate personnel when accounts are deleted.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-223764 | RACF-OS-000080 | SV-223764r998362_rule | Medium |
| Description |
|---|
| Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators. |
| STIG | Date |
|---|---|
| IBM z/OS RACF Security Technical Implementation Guide | 2024-06-24 |
Details
| Check Text ( C-25437r998361_chk ) |
|---|
| Ask the SA for the documented process to notify appropriate personnel when accounts are deleted. If there is no documented process, this is a finding. |
| Fix Text (F-25425r514981_fix) |
|---|
| Develop a documented develop a process to notify appropriate personnel when accounts are deleted. |