The Mainframe Product must provide protected storage for cryptographic keys with organization-defined safeguards and/or hardware protected key store.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-263685	SRG-APP-000915-MFP-000310	SV-263685r982601_rule	CCI-004910	medium
Description
A Trusted Platform Module (TPM) is an example of a hardware-protected data store that can be used to protect cryptographic keys.
STIG			Date
Mainframe Product Security Requirements Guide			2026-05-23

Related Frameworks

1 mapping across 3 frameworks

SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CRY-09Cryptographic Key Management

1.00

DISA STIG Benchmark (XCCDF)V3R5intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)
SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to

NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (6) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

IA-5(1)Password-based Authentication

1.00

DISA STIG Benchmark (XCCDF)V3R5intersects(normalised)
DISA STIG Benchmark (XCCDF)3our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

IA-5(2)Public Key-based Authentication

1.00

DISA STIG Benchmark (XCCDF)V3R5intersects(normalised)
DISA STIG Benchmark (XCCDF)3our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-17Public Key Infrastructure Certificates

1.00

DISA STIG Benchmark (XCCDF)V3R5intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-28Protection of Information at Rest

1.00

DISA STIG Benchmark (XCCDF)V3R5intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-28(1)Cryptographic Protection

1.00

DISA STIG Benchmark (XCCDF)V3R5intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-28(3)Cryptographic Keys

1.00

DISA STIG Benchmark (XCCDF)V3R5intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

CCI1 mapping

CCI-004910

1.00

DISA STIG Benchmark (XCCDF)V3R5intersects(normalised)

Details

Check Text (C-263685r982601_chk)

Verify the Mainframe Product is configured to provide protected storage for cryptographic keys with organization-defined safeguards and/or hardware protected key store. If the Mainframe Product is not configured to provide protected storage for cryptographic keys with organization-defined safeguards and/or hardware protected key store, this is a finding.

Fix Text (F-67506r982372_fix)

Configure the Mainframe Product to provide protected storage for cryptographic keys with organization-defined safeguards and/or hardware protected key store.