z/OS Compuware Abend-AID for ACF2 Security Technical Implementation Guide

Overview

VersionDateFinding Count (6)Downloads
V7R2
2 versions →
2025-09-27CAT I (High): 0CAT II (Medium): 6CAT III (Low): 0
STIG Description
This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.
ClassifiedPublicSensitive
I - Mission Critical ClassifiedI - Mission Critical PublicI - Mission Critical Sensitive
II - Mission Support ClassifiedII - Mission Support PublicII - Mission Support Sensitive
III - Administrative ClassifiedIII - Administrative PublicIII - Administrative Sensitive

Findings - All

Finding IDSeverityTitleDescription
V-224289
LOWMEDIUMHIGH
Compuware Abend-AID external security options must be specified properly.Compuware Abend-AID offers external security interfaces that are controlled by parameters specified in FDBDPARM DD statement of the started task proce...
V-224290
LOWMEDIUMHIGH
Compuware Abend-AID installation datasets will be properly protected.Compuware Abend-AID installation datasets have the ability to use privileged functions and/or have access to sensitive data. Failure to properly restr...
V-224291
LOWMEDIUMHIGH
Compuware Abend-AID STC datasets must be properly protected.Compuware Abend-AID STC datasets have the ability to use privileged functions and/or have access to sensitive data. Failure to properly restrict acces...
V-224292
LOWMEDIUMHIGH
Compuware Abend-AID user datasets must be properly protected.Compuware Abend-AID user datasets have the ability to use privileged functions and/or have access to sensitive data. Failure to properly restrict acce...
V-224293
LOWMEDIUMHIGH
Compuware Abend-AID resources must be properly defined and protected.Compuware Abend-AID can run with sensitive system privileges, and potentially can circumvent system controls. Failure to properly control access to pr...
V-224294
LOWMEDIUMHIGH
Compuware Abend-AID Started Task name will be properly identified and/or defined to the system ACP.Compuware Abend-AID requires a started task that will be restricted to certain resources, datasets, and other system functions. Defining the started t...