STIGQter: STIG Summary: z/OS CA 1 Tape Management for ACF2 Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

CA 1 Tape Management user exits, when in use, must be reviewed and/or approved.

DISA Rule

SV-224257r1141347_rule

Vulnerability Number

V-224257

Group Title

SRG-OS-000018

Rule Version

ZCA10060

Severity

CAT II

CCI(s)

• CCI-001744 - Implement organization-defined security responses automatically if baseline configurations are changed in an unauthorized manner.

Weight

10

Fix Recommendation

Ensure that the site ISSO has reviewed, evaluated, and approved the usage of CA 1 user exits TMSUXnA and TMSUXnS (for r11.5 and below) or TMSXITA and TMSXITS (for r12.0 and above). If one or both user exits are installed, the following requirements will be followed:

The usage and function of the user exit(s) is fully documented.

The use of the user exit(s) is approved.

All associated documentation is on file with the ISSO.

Check Contents

Refer to the following report produced by the z/OS Data Collection:

- CA1RPT(TMSCKLVL).

Determine if CA 1 user exits TMSUXnA and TMSUXnS (for r11.5 and below) or TMSXITA and TMSXITS (for r12.0 and above) are active.

If both CA 1 user exits are not found, this is not a finding.

If one or both user exits are installed and the following requirements are true, this is not a finding:

The usage and function of the user exit(s) is fully documented.

The use of the user exit(s) is approved.

All associated documentation is on file with the ISSO.

Vulnerability Number

V-224257

Documentable

False

Rule Version

ZCA10060

Severity Override Guidance

Refer to the following report produced by the z/OS Data Collection:

- CA1RPT(TMSCKLVL).

Determine if CA 1 user exits TMSUXnA and TMSUXnS (for r11.5 and below) or TMSXITA and TMSXITS (for r12.0 and above) are active.

If both CA 1 user exits are not found, this is not a finding.

If one or both user exits are installed and the following requirements are true, this is not a finding:

The usage and function of the user exit(s) is fully documented.

The use of the user exit(s) is approved.

All associated documentation is on file with the ISSO.

Check Content Reference

M

Target Key

4110