IBM z/OS system administrator must develop a procedure to offload SMF files to a different system or media than the system being audited.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-223585 | ACF2-OS-003430 | SV-223585r959008_rule | Medium |
| Description |
| Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity. |
| STIG | Date |
| IBM z/OS ACF2 Security Technical Implementation Guide | 2025-03-11 |
Details
| Check Text (C-25258r500890_chk) |
| Ask the system administrator for the procedure to offload SMF files to a different system or media than the system being audited. If the procedure does not exist, this is a finding. |
| Fix Text (F-25246r500891_fix) |
| Develop a procedure to offload SMF files to a different system or media than the system being audited. |