z/OS VSS for RACF Security Technical Implementation Guide

Overview

VersionDateFinding Count (3)Downloads
72025-03-04CAT I (High): 0CAT II (Medium): 3CAT III (Low): 0
STIG Description
This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.
ClassifiedPublicSensitive
I - Mission Critical ClassifiedI - Mission Critical PublicI - Mission Critical Sensitive
II - Mission Support ClassifiedII - Mission Support PublicII - Mission Support Sensitive
III - Administrative ClassifiedIII - Administrative PublicIII - Administrative Sensitive

Findings - All

Finding IDSeverityTitleDescription
V-224543
LOWMEDIUMHIGH
Vanguard Security Solutions (VSS) Install data sets are not properly protected.Vanguard Security Solutions (VSS) Install data sets provide the capability to use privileged functions and/or have access to sensitive data. Failure t...
V-224544
LOWMEDIUMHIGH
Vanguard Security Solutions (VSS) User data sets are not properly protected.VSS User data sets provide the capability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to the...
V-224545
LOWMEDIUMHIGH
Vanguard Security Solutions resources must be properly defined and protected.Program products can run with sensitive system privileges, and potentially can circumvent system controls. Failure to properly control access to progr...