STIGQter: STIG Summary: IBM z/OS ACF2 Security Technical Implementation Guide Version: 9 Release: 9 Benchmark Date: 01 Jul 2026:

ACF2 PSWD GSO record value must be set to require at least one numeric character be used.

DISA Rule

SV-223502r1225732_rule

Vulnerability Number

V-223502

Group Title

SRG-OS-000071-GPOS-00039

Rule Version

ACF2-ES-000850

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure the Password options to include "PSWDALPH".

Check Contents

From an ACF command screen enter:
SET CONTROL(GSO)
LIST PSWD

If "PSWDALPH" is coded, this is not a finding.

Vulnerability Number

V-223502

Documentable

False

Rule Version

ACF2-ES-000850

Severity Override Guidance

From an ACF command screen enter:
SET CONTROL(GSO)
LIST PSWD

If "PSWDALPH" is coded, this is not a finding.

Check Content Reference

M

Target Key

4100