IBM zSecure Suite Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-APP-000023-MFP-000033
<GroupDescription></GroupDescription>Group -
The IBM Security zSecure Suite products must use an external security manager (RACF, ACF2, or TSS) for all account management functions.
<VulnDiscussion>Enterprise environments make application account management challenging and complex. A manual process for account management ...Rule High Severity -
SRG-APP-000133-MFP-000192
<GroupDescription></GroupDescription>Group -
Access to zSecure installation data must be properly restricted and logged.
<VulnDiscussion>If the zSecure application were to allow any user to make changes to software libraries, those changes might be implemented w...Rule Medium Severity -
SRG-APP-000133-MFP-000193
<GroupDescription></GroupDescription>Group -
Access to IBM Security zSecure STC data sets must be properly restricted and logged.
<VulnDiscussion>IBM Security zSecure STC have the ability to use privileged functions and/or have access to sensitive data. Failure to proper...Rule Medium Severity -
SRG-APP-000133-MFP-000194
<GroupDescription></GroupDescription>Group -
IBM Security zSecure access to user data sets must be properly restricted and logged.
<VulnDiscussion>If zSecure were to allow inappropriate reading or updating of user data sets, sensitive information could be disclosed, or ch...Rule Medium Severity -
SRG-APP-000148-MFP-000206
<GroupDescription></GroupDescription>Group -
Started tasks for zSecure products must be properly defined.
<VulnDiscussion>Started tasks and batch job IDs can be automatically revoked accidentally if not properly protected. When properly protected ...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.