The IBM z/OS system administrator (SA) must develop a process to notify appropriate personnel when accounts are deleted.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-223764RACF-OS-000080SV-223764r998362_ruleCCI-000015medium
Description
Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.
STIGDate
IBM z/OS RACF Security Technical Implementation Guide2025-06-24

Details

Check Text (C-223764r998362_chk)

Ask the SA for the documented process to notify appropriate personnel when accounts are deleted. If there is no documented process, this is a finding.

Fix Text (F-25425r514981_fix)

Develop a documented develop a process to notify appropriate personnel when accounts are deleted.