The IBM z/VM system administrator must develop routines and processes for the proper configuration and maintenance of Software.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-237965 | IBMZ-VM-002350 | SV-237965r649735_rule | CCI-000366 | medium |
| Description | ||||
| Proper configuration management procedures for information systems provide for the proper configuration and maintenance in accordance with local policies restrictions and/or rules. Failure to properly configure and maintain system software and applications on the information system could result in a weakened security posture. | ||||
| STIG | Date | |||
| IBM zVM Using CA VM:Secure Security Technical Implementation Guide | 2022-08-31 | |||
Details
Check Text (C-237965r649735_chk)
Ask the system administrator (SA) for documented procedures and routines for proper configuration management of software.
If there are no procedures or the procedures are not documented and on file with the ISSO, this is a finding.
Fix Text (F-41134r649734_fix)
Develop a procedure for proper configuration of software components.
Include proper maintenance procedures.