STIGViewer Support

CA 1 Tape Management Resource Class will be defined or active in the ACP.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-224457ZCA1R038SV-224457r987853_ruleCCI-000336medium
Description
Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.
STIGDate
z/OS CA 1 Tape Management for RACF Security Technical Implementation Guide2024-12-16

Related Frameworks

2 mappings across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (2) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

IAC-27Reference Monitor
1.00
IAO-06Technical Verification
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (4) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-25Reference Monitor
1.00
AC-3Access Enforcement
1.00
CM-4(2)Verification of Controls
1.00
CM-6Configuration Settings
1.00
CCI2 mappings

Details

Check Text (C-224457r987853_chk)

Refer to the following report produced by the RACF Data Collection: - RACFCMDS.RPT(SETROPTS) - DSMON.RPT(RACCDT) - Alternate list of active resource classes Automated Analysis Refer to the following report produced by the RACF Data Collection: - PDI(ZCA10038) If the CA 1 Tape Management resource class(es) is (are) active, this is not a finding.

Fix Text (F-26122r519507_fix)

Ensure that the following CA 1 Tape Management Resource Class(es) is (are) active. CA@CMD CA@APE Use the following commands as an example: SETROPTS CLASSACT(CA@CMD,CA@APE)