BMC Mainview for z/OS Resource Class will be defined or active in the ACP.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-224428	ZMVZR038	SV-224428r1144929_rule	CCI-000336	medium
Description
Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.
STIG			Date
z/OS BMC MAINVIEW for z/OS for RACF Security Technical Implementation Guide			2025-09-27

Related Frameworks

1 mapping across 3 frameworks

SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

IAO-06Technical Verification

1.00

DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)
SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to

NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (3) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-25Reference Monitor

1.00

DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
DISA STIG Benchmark (XCCDF)7our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)7intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

CM-4(2)Verification of Controls

1.00

DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

CM-6Configuration Settings

1.00

DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)
DISA STIG Benchmark (XCCDF)6our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)6intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

CCI1 mapping

CCI-000336

1.00

DISA STIG Benchmark (XCCDF)V7R2intersects(normalised)

Details

Check Text (C-224428r1144929_chk)

Refer to the following report produced by the RACF Data Collection: - RACFCMDS.RPT(SETROPTS). - DSMON.RPT(RACCDT) - Alternate list of active resource classes. Automated Analysis Refer to the following report produced by the RACF Data Collection: - PDI(ZMVZ0038). If the BMC Mainview for z/OS resource class(es) is (are) active, this is not a finding.

Fix Text (F-26093r1144928_fix)

The ISSO will ensure that the BMC Mainview for z/OS Resource Class(es) is (are) active. Use the following commands as an example: RDEFINE CDT class - CDTINFO( MAXLENGTH(64) DEFAULTUACC(NONE) - FIRST(ALPHA) CASE(UPPER) - OTHER(ALPHA,NUMERIC,NATIONAL,SPECIAL) - POSIT(301) RACLIST(REQUIRED) - GENERIC(ALLOWED) GENLIST(ALLOWED) - OPERATIONS(YES) - ) UACC(NONE) SETROPTS CLASSACT(CDT) RACLIST(CDT) SETROPTS RACLIST(CDT) REFRESH SETROPTS GENERIC(class) GENCMD(class) SETROPTS CLASSACT(class) RACLIST(class) SETROPTS RACLIST(class) REFRESH