STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

Mainframe Products must audit nonlocal maintenance and diagnostic sessions audit events as defined in site security plan.

DISA Rule

SV-205578r961548_rule

Vulnerability Number

V-205578

Group Title

SRG-APP-000409

Rule Version

SRG-APP-000409-MFP-000257

Severity

CAT II

CCI(s)

• CCI-002884 - Log organization-defined audit events for nonlocal maintenance and diagnostic sessions.

Weight

10

Fix Recommendation

Configure the Mainframe Product to audit the nonlocal maintenance and diagnostic sessions audit events defined in site security plan using external security manager files and/or SMF records.

Check Contents

If the Mainframe Product has no function or capability for nonlocal maintenance this is not applicable.

Examine installation and configuration settings.

If the Mainframe Product does not audit the nonlocal maintenance and diagnostic sessions audit events defined in site security plan using external security manager files and/or SMF records, this is a finding.

Vulnerability Number

V-205578

Documentable

False

Rule Version

SRG-APP-000409-MFP-000257

Severity Override Guidance

If the Mainframe Product has no function or capability for nonlocal maintenance this is not applicable.

Examine installation and configuration settings.

If the Mainframe Product does not audit the nonlocal maintenance and diagnostic sessions audit events defined in site security plan using external security manager files and/or SMF records, this is a finding.

Check Content Reference

M

Target Key

2906