STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

The Mainframe Product must automatically disable accounts after 35 days of account inactivity.

DISA Rule

SV-205446r960774_rule

Vulnerability Number

V-205446

Group Title

SRG-APP-000025

Rule Version

SRG-APP-000025-MFP-000038

Severity

CAT II

CCI(s)

• CCI-000017 - Disable accounts when the accounts have been inactive for the organization-defined time-period.

Weight

10

Fix Recommendation

Configure the Mainframe Product account management settings to automatically disable accounts after 35 days of account inactivity.

Check Contents

If the Mainframe Product employs an external security manager for all account management functions, this is not applicable.

Examine account management settings.

If the Mainframe Product automatically disables accounts after 35 days of inactivity, this is not a finding.

Vulnerability Number

V-205446

Documentable

False

Rule Version

SRG-APP-000025-MFP-000038

Severity Override Guidance

If the Mainframe Product employs an external security manager for all account management functions, this is not applicable.

Examine account management settings.

If the Mainframe Product automatically disables accounts after 35 days of inactivity, this is not a finding.

Check Content Reference

M

Target Key

2906