z/OS TADz for ACF2 Security Technical Implementation Guide

Version	Date	Finding Count (3)			Downloads
6	2022-10-06 2015-01-15 2015-01-15 2015-01-15 2016-01-04 2016-01-04 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28 2016-03-28	CAT I (High): 0	CAT II (Med): 3	CAT III (Low): 0	Excel	JSON	XML

STIG Description
This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DoD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.

Classified	Public	Sensitive
I - Mission Critical Classified	I - Mission Critical Public	I - Mission Critical Sensitive	II - Mission Support Classified	II - Mission Support Public	II - Mission Support Sensitive	III - Administrative Classified	III - Administrative Public	III - Administrative Sensitive

Finding ID	Severity	Title	Description
V-224344	Medium	Tivoli Asset Discovery for z/OS (TADz) Install data sets are not properly protected.	Tivoli Asset Discovery for z/OS (TADz) Install data sets provide the capability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to their data...
V-224345	Medium	Tivoli Asset Discovery for zOS (TADz) STC and/or batch data sets are not properly protected.	Tivoli Asset Discovery for zOS (TADz) STC data sets provide the capability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to their data sets...
V-224346	Medium	Tivoli Asset Discovery for z/OS (TADz) Started Task name(s) must be properly identified / defined to the system ACP.	Tivoli Asset Discovery for z/OS (TADz) requires a started task(s) that will be restricted to certain resources, datasets and other system functions. By defining the started task as a userid to the...