The number of CA-TSS ACIDs possessing the tape Bypass Label Processing (BLP) privilege must be limited.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-223875 | TSS0-ES-000020 | SV-223875r958472_rule | CCI-000213 | medium |
| Description | ||||
| The use of security policy filters provides protection for the confidentiality of data by restricting the flow of data. A crucial part of any flow control solution is the ability to configure policy filters. This allows the operating system to enforce multiple and different security policies. Policy filters serve to enact and enforce the organizational policy as it pertains to controlling data flow. | ||||
| STIG | Date | |||
| IBM z/OS TSS Security Technical Implementation Guide | 2025-06-24 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
AC-3
1.00
- DISA · 9 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.1.1
1.00
- DISA · 9 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.1.2
1.00
- DISA · 9 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000213
1.00
- DISA · 9 · disa_xccdf · related
Details
Check Text (C-223875r958472_chk)
From the ISPF Command Shell enter:
TSS LIST(ACIDS) DATA(BASIC)
If only authorized personnel have BLP access and documentation for access is on file with the ISSO, this is not a finding.
Fix Text (F-25536r516025_fix)
Review all ACIDs with the BLP attribute. Evaluate the impact of removing BLP access from unauthorized personnel. Develop a plan of action and remove BLP access from unauthorized ACIDs.