+SYS.1.7.A30 Protection of the z/OS Trace Functions (S)

SYS.1.7.A30 Protection of the z/OS Trace Functions (S)

The trace functions of z/OS, such as GTF (generalised trace facility), NetView, or ACF/TAP (Advanced Communication Function/Trace Analysis Program) and the corresponding files, SHOULD be protected in such a way that only the responsible and authorised employees have access to them. The trace function of NetView SHOULD be disabled and only activated if required.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.37 Repudiation of Actions
blocks G 0.43 Attack with Specially Crafted Messages