An active log is not available to keep track of all hardware upgrades and software changes made to the FEP (Front End Processor).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6903	ZFEP0014	SV-7198r3_rule		Medium

Description
If components of the FEPs are not properly protected they can be stolen, damaged, or disturbed. Without adequate physical security, unauthorized users can access the control panel, the operator console, and the diskette drive of the service subsystem. Therefore, they can interfere with the normal operations of the FEPs. Improper control of FEP components could compromise network operations.

STIG	Date
zOS FEP for RACF STIG	2020-01-23

Details

Check Text ( C-20296r1_chk )
a) Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive: - All documents and procedures that apply to FEP operations including network management, FEP initialization, IPL, shutdown, NCP dumping, backup, and recovery. b) If a log is in place to keep track of all hardware upgrades and software changes, there is NO FINDING. c) If no log is in place to keep track of all hardware upgrades and software changes, this is a FINDING.

Check Text ( C-20296r1_chk )

a) Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- All documents and procedures that apply to FEP operations including network management, FEP initialization, IPL, shutdown, NCP dumping, backup, and recovery.

b) If a log is in place to keep track of all hardware upgrades and software changes, there is NO FINDING.

c) If no log is in place to keep track of all hardware upgrades and software changes, this is a FINDING.

Fix Text (F-18252r1_fix)
The systems programmer will see that a a log of all hardware and software upgrades/changes has been created for auditing purposes and problem tracking. All changes and upgrades will be logged.