z/OS Quest NC-Pass for ACF2 STIG

Version	Date	Finding Count (4)			Downloads
None	2015-01-15 2022-10-06 2022-10-06 2022-10-06 2022-10-06 2022-10-06 2022-10-06 2022-10-06	CAT I (High): 0	CAT II (Med): 4	CAT III (Low): 0	Excel	JSON	XML

STIG Description
None

Classified	Public	Sensitive
I - Mission Critical Classified	I - Mission Critical Public	I - Mission Critical Sensitive	II - Mission Support Classified	II - Mission Support Public	II - Mission Support Sensitive	III - Administrative Classified	III - Administrative Public	III - Administrative Sensitive

Finding ID	Severity	Title	Description
V-16932	Medium	Quest NC-Pass installation data sets will be properly protected.	Quest NC-Pass installation data sets have the ability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to these data sets could result in...
V-17452	Medium	Quest NC-Pass Started Task name will be properly identified and/or defined to the system ACP.	Quest NC-Pass requires a started task that will be restricted to certain resources, datasets and other system functions. By defining the started task as a userid to the system ACP, It allows the...
V-17947	Medium	Quest NC-Pass will be used by Highly-Sensitive users.	DISA has directed that Quest NC-Pass extended authentication be implemented on all domains. All users with update and alter access to sensitive system-level data sets and resources, or who possess...
V-17067	Medium	Quest NC-Pass STC data sets will be properly protected.	Quest NC-Pass STC data sets have the ability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to these data sets could result in violating the...