+SYS.1.7.A7 Restrictive Authorisation in z/OS (B)

SYS.1.7.A7 Restrictive Authorisation in z/OS (B)

In the basic configuration of z/OS, the authorisation mechanisms MUST be configured so that all persons (defined user IDs in groups according to the respective roles) only have the access options they need for their respective activities. For this purpose, APF (authorised program facility) authorisations, supervisor calls (SVCs), resources of the z/OS operating system, IPL parameters, Parmlib definitions, started tasks, and JES2/3 definitions MUST be considered.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.37 Repudiation of Actions
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information