STIGQter: STIG Summary: z/OS ACF2 STIG Version: 6 Release: 43 Benchmark Date: 24 Jan 2020: The AUTOERAS GSO record value must be set to indicate that ACF2 is controlling the automatic physical erasure of VSAM or non VSAM data sets.

DISA Rule

SV-132r4_rule

Vulnerability Number

V-132

Group Title

ACF0270

Rule Version

ACF0270

Severity

CAT II

CCI(s)

• CCI-001028 - The organization sanitizes organization-defined information system media prior to disposal, release out of organizational control, or release for reuse using organization-defined sanitization techniques and procedures in accordance with applicable federal and organizational standards and policies.
• CCI-001090 - The information system prevents unauthorized and unintended information transfer via shared system resources.

Weight

10

Fix Recommendation

The IAO must ensure that the AUTOERASE GSO value indicates that ACF2 is controlling the automatic physical erasure of VSAM or non VSAM data sets.

Example:

SET C(GSO)
INSERT AUTOERAS NON-VSAM VSAM VOLS(-)

F ACF2,REFRESH(AUTOERAS)

Check Contents

Refer to the following report produced by the ACF2 Data Collection:

- ACF2CMDS.RPT(ACFGSO)

Automated Analysis requires Additional Analysis.
Refer to the following report produced by the ACF2 Data Collection:

- PDI(ACF0270)

If the GSO AUTOERAS record values conform to the following requirements, this is not a finding.

All Systems: NON-VSAM VSAM VOLS(-)

Vulnerability Number

V-132

Documentable

False

Rule Version

ACF0270

Severity Override Guidance

Refer to the following report produced by the ACF2 Data Collection:

- ACF2CMDS.RPT(ACFGSO)

Automated Analysis requires Additional Analysis.
Refer to the following report produced by the ACF2 Data Collection:

- PDI(ACF0270)

If the GSO AUTOERAS record values conform to the following requirements, this is not a finding.

All Systems: NON-VSAM VSAM VOLS(-)

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

198

Comments