IBM z/OS system administrator must develop a procedure to offload SMF files to a different system or media than the system being audited.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-224042	TSS0-OS-000470	SV-224042r959008_rule		Medium

Description

The task of allocating audit record storage capacity is usually performed during initial installation of the operating system.

STIG	Date
IBM z/OS TSS Security Technical Implementation Guide	2024-12-05

Details

Check Text (C-25715r516525_chk)

Ask the system administrator for the procedure to offload SMF files to a different system or media than the system being audited.

If the procedure does not exist, this is a finding.

Fix Text (F-25703r516526_fix)

Develop a procedure to offload SMF files to a different system or media than the system being audited.