+SYS.1.7.A38 Use of the VTAM Session Management Exit in z/OS (H)

SYS.1.7.A38 Use of the VTAM Session Management Exit in z/OS (H)

If a VTAM session management exit is to be used, it SHOULD be ensured that it will not impair secure and efficient operations. At minimum, the exit SHOULD allow a subsequent check of a rejected login attempt. In addition, the exit SHOULD be configured dynamically and the set of rules loaded from an external file. Functions, commands, and files related to the exit SHOULD be protected by RACF.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.40 Denial of Service
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information