STIGQter: STIG Summary: z/OS BMC CONTROL-M for ACF2 Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

BMC CONTROL-M configuration/parameter values must be specified properly.

DISA Rule

SV-224120r1141467_rule

Vulnerability Number

V-224120

Group Title

SRG-OS-000080

Rule Version

ZCTMA040

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Configure the standard values for the BMC CONTROL-M security parameters for the specific ACP environment along with additional IOA security parameters with standard values as documented below.

Keyword Value
DEFMCHKM $$CTMEDM
SECTOLM NO
DFMM01 EXTEND
DFMM02 EXTEND
DFMM08 EXTEND
SAFJCARD U
MSUBCHK NO

Check Contents

Refer to the following applicable reports produced by the z/OS Data Collection:

- IOA.RPT(SECPARM).

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCTM0040).

The following keywords will have the specified values in the BMC CONTROL-M security parameter member. This is not a finding.

Keyword Value
DEFMCHKM $$CTMEDM
SECTOLM NO
DFMM01 EXTEND
DFMM02 EXTEND
DFMM08 EXTEND
SAFJCARD U
MSUBCHK NO

Vulnerability Number

V-224120

Documentable

False

Rule Version

ZCTMA040

Severity Override Guidance

Refer to the following applicable reports produced by the z/OS Data Collection:

- IOA.RPT(SECPARM).

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCTM0040).

The following keywords will have the specified values in the BMC CONTROL-M security parameter member. This is not a finding.

Keyword Value
DEFMCHKM $$CTMEDM
SECTOLM NO
DFMM01 EXTEND
DFMM02 EXTEND
DFMM08 EXTEND
SAFJCARD U
MSUBCHK NO

Check Content Reference

M

Target Key

4104