STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

The Mainframe Product must provide the capability for authorized users to select a user session to capture/record or view/hear.

DISA Rule

SV-219060r961863_rule

Vulnerability Number

V-219060

Group Title

SRG-APP-000516

Rule Version

SRG-APP-000354-MFP-000136

Severity

CAT II

CCI(s)

• CCI-001919 - Provide the capability for organization-defined users or roles to select a user session to record; view; hear; or log the content of a user session under organization-defined circumstances.

Weight

10

Fix Recommendation

Configure the Mainframe Product to permit authorized users to select a user session to capture/record or view/hear.

If there is an ESM in use, configure ESM to restrict the ability to select sessions to capture/record or view/hear in accordance with applicable access control policies to system programmers or security administrators.

Check Contents

If the Mainframe Product has no function or capability for session operations, this is not applicable.

Examine installation and configuration settings.

Verify that the Mainframe Product has the capability to select user sessions for monitoring and allows system programmers and security administrators to select sessions to capture/record or view/hear in accordance with applicable access control policies.

If it does not, this is a finding.

If there is an external security manager (ESM) in use, verify that the ESM restricts the ability to select sessions to capture/record or view/hear in accordance with applicable access control policies to system programmers or security administrators.

If it does not, this is a finding.

Vulnerability Number

V-219060

Documentable

False

Rule Version

SRG-APP-000354-MFP-000136

Severity Override Guidance

If the Mainframe Product has no function or capability for session operations, this is not applicable.

Examine installation and configuration settings.

Verify that the Mainframe Product has the capability to select user sessions for monitoring and allows system programmers and security administrators to select sessions to capture/record or view/hear in accordance with applicable access control policies.

If it does not, this is a finding.

If there is an external security manager (ESM) in use, verify that the ESM restricts the ability to select sessions to capture/record or view/hear in accordance with applicable access control policies to system programmers or security administrators.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2906