STIGQter: STIG Summary: IBM z/OS ACF2 Security Technical Implementation Guide Version: 9 Release: 9 Benchmark Date: 01 Jul 2026:

IBM z/OS Started Tasks must be properly identified and defined to ACF2.

DISA Rule

SV-223485r1225715_rule

Vulnerability Number

V-223485

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

ACF2-ES-000670

Severity

CAT II

CCI(s)

• CCI-000764 - Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Weight

10

Fix Recommendation

All started tasks will be assigned an individual logonid. The logonid for a Started Task Control (STC) will be granted the minimum privileges necessary for the STC to function. In addition to the default LID field settings, all STC logonids will have the following field setting:

STC

Example:
SET LID
INSERT logonid STC

Check Contents

Refer to the site security plan, the system administrator, and system libraries to determine list of stated tasks available on the system.

From the ACF command screen enter:
SET LID
SET VERBOSE
LIST IF(STC)

If all logonids identified as started tasks have the STC attribute specified, this is not a finding.

Vulnerability Number

V-223485

Documentable

False

Rule Version

ACF2-ES-000670

Severity Override Guidance

Refer to the site security plan, the system administrator, and system libraries to determine list of stated tasks available on the system.

From the ACF command screen enter:
SET LID
SET VERBOSE
LIST IF(STC)

If all logonids identified as started tasks have the STC attribute specified, this is not a finding.

Check Content Reference

M

Target Key

4100