IBM Tivoli Asset Discovery for zOS (TADz) Started task(s) must be properly defined to the Started Task Table ACID for Top Secret.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-225611ZTADT032SV-225611r1146163_ruleCCI-000764medium
Description
Access to product resources should be restricted to only those individuals responsible for the application connectivity and who have a requirement to access these resources. Improper control of product resources could potentially compromise the operating system, ACP, and customer data.
STIGDate
z/OS TADz for TSS Security Technical Implementation Guide2025-09-28

Details

Check Text (C-225611r1146163_chk)

Refer to the following report produced by the TSS Data Collection: - TSSCMDS.RPT(#STC). Automated Analysis Refer to the following report produced by the TSS Data Collection: - PDI(ZTAD0032). Verify that the IBM Tivoli Asset Discovery for zOS (TADz) started task(s) is (are) defined in the TSS STC record. If this guidance is true, this is not a finding.

Fix Text (F-27299r1146162_fix)

The IBM Tivoli Asset Discovery for zOS (TADz) systemsprogrammer and the ISSO will ensure that a product's started task(s) is (are) properly identified and/or defined to the system ACP. A unique ACID must be assigned for the IBM Tivoli Asset Discovery for zOS (TADz) started task(s) through a corresponding STC table entry. The following sample set of commands is shown here as a guideline: TSS ADD(STC) PROCNAME(TADZMON) ACID(TADZMON)