BMC IOA is not properly defined to the Facility Matrix Table for Top Secret.
An XCCDF Rule
Description
Improperly defined security controls for BMC IOA could result in the compromise of the network, operating system, and customer data.
- ID
- SV-224605r518955_rule
- Version
- ZIOAT036
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
The BMC IOA system programmer and the IAO will ensure that the TOP SECRET Facility Matrix Table is proper defined using the following example:
IOA:
FACILITY(USERxx=NAME=IOA,PGM=IOA,ID=nn,ACTIVE,SHRPRF)
FACILITY(IOA=ASUBM,NOABEND,MULTIUSER,NOXDEF)
FACILITY(IOA=LUMSG,STMSG,SIGN(S),NORNDPW)