Skip to content
Log In

ACF2/CICS parameter data sets are not protected in accordance with the proper security requirements.

An XCCDF Rule

Description

CICS is a transaction-processing product that provides programmers with the facilities to develop interactive applications. Unauthorized access to ACF2/CICS parameter data sets (i.e., product, security) could result in the compromise of the confidentiality, integrity, and availability of the CICS region, applications, and customer data.

ID
SV-224308r958616_rule
Version
ZCICA011
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

The IAO will ensure that update and allocate access to the ACF2/CICS parameter data set is limited to system programmers and security personnel.

Review the access authorizations for CICS system data sets.

UPDATE and/or ALLOCATE access to the ACF2/CICS parameter data set, specified on the ACF2PARM DD statement, is restricted to systems programming personnel and security personnel.