+SYS.1.7.A5 Use and Protection of System-Related z/OS Terminals (B)

SYS.1.7.A5 Use and Protection of System-Related z/OS Terminals (B)

System-adjacent z/OS terminals MUST be physically and logically protected against unauthorised access. The Support Elements in particular MUST be considered, along with the HMC, MCS, SMCS, Extended MCS, and monitor consoles. Default passwords MUST be changed. Access via web servers and other remote access MUST be protected by encryption. Web servers and other forms of remote access MUST be disabled when not in use.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information