OpenControls Logo

STIG Viewer

STIGViewer Support

CA 1 Tape Management user exits, when in use, must be reviewed and/or approved.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-224257ZCA10060SV-224257r1141347_ruleCCI-001744medium
Description
CA 1 Tape Management user exits, TMSUXnA and TMSUXnS, provide the capability to bypass or modify existing ACP controls. A review and evaluation of exit code must be performed to ensure that the integrity of the CA 1 processing environment is kept intact. Unauthorized usage of these exits may compromise the confidentiality and integrity of customer data.
STIGDate
z/OS CA 1 Tape Management for ACF2 Security Technical Implementation Guide2025-09-27

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CHG-02.4Automated Security Response
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (9) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AU-12Audit Record Generation
1.00
AU-3Content of Audit Records
1.00
AU-3(1)Additional Audit Information
1.00
AU-5(2)Real-time Alerts
1.00
AU-8Time Stamps
1.00
CM-3(5)Automated Security Response
1.00
CM-5(1)Automated Access Enforcement and Audit Records
1.00
SI-11Error Handling
1.00
SI-6Security and Privacy Function Verification
1.00
CCI1 mapping
CCI-001744
1.00

Details

Check Text (C-224257r1141347_chk)

Refer to the following report produced by the z/OS Data Collection: - CA1RPT(TMSCKLVL). Determine if CA 1 user exits TMSUXnA and TMSUXnS (for r11.5 and below) or TMSXITA and TMSXITS (for r12.0 and above) are active. If both CA 1 user exits are not found, this is not a finding. If one or both user exits are installed and the following requirements are true, this is not a finding: The usage and function of the user exit(s) is fully documented. The use of the user exit(s) is approved. All associated documentation is on file with the ISSO.

Fix Text (F-25918r1141346_fix)

Ensure that the site ISSO has reviewed, evaluated, and approved the usage of CA 1 user exits TMSUXnA and TMSUXnS (for r11.5 and below) or TMSXITA and TMSXITS (for r12.0 and above). If one or both user exits are installed, the following requirements will be followed: The usage and function of the user exit(s) is fully documented. The use of the user exit(s) is approved. All associated documentation is on file with the ISSO.