+SYS.1.7.A2 Protection of Security-Critical z/OS Utilities (B)

SYS.1.7.A2 Protection of Security-Critical z/OS Utilities (B)

Security-critical (service) programs and commands and their alias names MUST be protected with rights to corresponding RACF profiles in such a way that they can only be used by the designated and authorised employees. It MUST be ensured that (third-party) programs cannot be installed without authorisation. In addition, programs MUST ONLY be installed from secured sources using transparent methods (e.g. SMP/E).

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.37 Repudiation of Actions
blocks G 0.40 Denial of Service
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information