STIGQter: STIG Summary: z/OS IBM CICS Transaction Server for ACF2 Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

Key ACF2/CICS parameters must be properly coded.

DISA Rule

SV-224311r1141399_rule

Vulnerability Number

V-224311

Group Title

SRG-OS-000480

Rule Version

ZCICA023

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Ensure the ACF2/CICS parameters are coded with values specified in the table titled ACF2/CICS Parameters, in the zOS STIG Addendum.

Browse the ACF2/CICS dataset allocated by the ACF2PARM DD statement in the JCL of each CICS procedure.

Ensure that all key ACF2/CICS parameters for every CICS region are coded as stated in the table titled ACF2/CICS Parameters, in the zOS STIG Addendum.

Check Contents

Refer to the following report produced by the z/OS Data Collection:

- EXAM.RPT(CICSPROC).

Refer to the CICS Systems Programmer Worksheets filled out from previous vulnerability ZCIC0010.

Refer to the CICS region SYSLOG - (Alternate source of SIT parameters).

Browse the ACF2/CICS dataset allocated by the ACF2PARM DD statement in the JCL of each CICS procedure.

If all key ACF2/CICS parameters for every CICS region are coded as stated in the table titled ACF2/CICS Parameters in the z/OS STIG Addendum, this is not a finding.

Note: The DEFAULT TERMINAL=parameter must be specified.
CICSKEY OPTION=VALIDATE,TYPE=resource type,RESOURCE=TRANS will specify a unique resource type for each CICS region.

Key ACF2/CICS parameters must be properly coded.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key