+SYS.1.7.A23 Protection of z/VM (S)

SYS.1.7.A23 Protection of z/VM (S)

If z/VM is used, it SHOULD be integrated into patch management. All default passwords SHOULD be changed. The role of z/VM system administrator SHOULD only be assigned to persons who require the corresponding authorisations. RACF for z/VM SHOULD be used for z/VM security administration. Passwords for real users and guest users SHOULD be encrypted using RACF for z/VM. z/VM system commands that are critical to security SHOULD be protected using RACF. The virtual machines defined in z/VM SHOULD only be provided with the resources necessary to perform their particular tasks and strictly separated from each other. Only the services needed SHOULD be started in z/VM. When checks are performed, the journalling function of z/VM and the audit functions of RACF SHOULD be used.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.14 Interception of Information / Espionage
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.37 Repudiation of Actions
blocks G 0.40 Denial of Service
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information