+SYS.1.7.A1 Use of Restrictive z/OS IDs (B)

SYS.1.7.A1 Use of Restrictive z/OS IDs (B)

High-level authorisations MUST ONLY be assigned to users who need these rights for their activities. In particular, the RACF attributes SPECIAL, OPERATIONS, AUDITOR, and the corresponding GROUP attributes, as well as the user ID 0, MUST be handled restrictively under Unix System Services (USS). The assignment and use of these authorisations MUST be documented transparently. The special ID IBMUSER MUST ONLY be used during reinstallation to create IDs with SPECIAL attributes. Once this is complete, this ID MUST be permanently disabled. To prevent administrators from permanently locking themselves out, an emergency user procedure MUST be set up.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.37 Repudiation of Actions
blocks G 0.40 Denial of Service
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information