Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
IBM z/OS must employ a session manager to manage display of the Standard Mandatory DoD Notice and Consent Banner.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-223768 | RACF-OS-000120 | SV-223768r958390_rule | Medium |
| Description |
|---|
| Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. All methods of gaining access to the system must comply with this requirement to assure that regulations are upheld. |
| STIG | Date |
|---|---|
| IBM z/OS RACF Security Technical Implementation Guide | 2024-06-24 |
Details
| Check Text ( C-25441r514992_chk ) |
|---|
| Verify that any session manger in use displays the Standard Mandatory DoD Notice and Consent Banner before granting access to the system. If the session manager does not display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system, this is a finding. |
| Fix Text (F-25429r514993_fix) |
|---|
| Configure any session manger in use to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system. |