STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

The Mainframe Product must provide audit record generation capability for DoD-defined auditable events within all application components.

DISA Rule

SV-205459r960879_rule

Vulnerability Number

V-205459

Group Title

SRG-APP-000089

Rule Version

SRG-APP-000089-MFP-000114

Severity

CAT II

CCI(s)

• CCI-000169 - Provide audit record generation capability for the event types the system is capable of auditing as defined in AU-2 a. on organization-defined information system components.

Weight

10

Fix Recommendation

Configure the Mainframe Product to audit all DoD-defined auditing events within all Mainframe Product components.

Check Contents

Examine Mainframe Product documentation.

Refer to NIST SP 800-53 AU-2 or the Risk Management Knowledge Service (RMKS) for DoD auditing events.

Examine configuration settings.

Compare available auditing events.

If available auditing events do not include all DoD-defined auditing events, this is a finding.

If auditing is not available for all components of the Mainframe Product, this is a finding.

Vulnerability Number

V-205459

Documentable

False

Rule Version

SRG-APP-000089-MFP-000114

Severity Override Guidance

Examine Mainframe Product documentation.

Refer to NIST SP 800-53 AU-2 or the Risk Management Knowledge Service (RMKS) for DoD auditing events.

Examine configuration settings.

Compare available auditing events.

If available auditing events do not include all DoD-defined auditing events, this is a finding.

If auditing is not available for all components of the Mainframe Product, this is a finding.

Check Content Reference

M

Target Key

2906