STIGQter: STIG Summary: IBM z/OS TSS Security Technical Implementation Guide Version: 8 Release: 2 Benchmark Date: 23 Apr 2021:

The IBM z/OS Policy Agent must contain a policy that manages excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks.

DISA Rule

SV-224011r561402_rule

Vulnerability Number

V-224011

Group Title

SRG-OS-000142-GPOS-00071

Rule Version

TSS0-OS-000150

Severity

CAT II

CCI(s)

• CCI-001095 - The information system manages excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial of service attacks.

Weight

10

Fix Recommendation

Develop Policy application and Policy agent to manage excess capacity.

Check Contents

Examine the Policy Agent policy statements.

If it can be determined that there are policy statements that manages excess capacity, this is not a finding.

Vulnerability Number

V-224011

Documentable

False

Rule Version

TSS0-OS-000150

Severity Override Guidance

Examine the Policy Agent policy statements.

If it can be determined that there are policy statements that manages excess capacity, this is not a finding.

Check Content Reference

M

Target Key

4102

Comments