The configuration of a z/OS operating system is very complex and requires action from a system administrator in many areas. Incorrect or inadequate configuration can quickly lead to vulnerabilities and related security problems. Supervisor calls (SVCs), for example, are calls to special z/OS utilities that run with a high level of authorisation in kernel mode. Under certain circumstances, insecure SVC programs can be used to circumvent z/OS security mechanisms.