STIGQter: STIG Summary: z/OS BMC CONTROL-M for RACF Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

BMC CONTROL-M configuration/parameter values must be specified properly.

DISA Rule

SV-224404r1144792_rule

Vulnerability Number

V-224404

Group Title

SRG-OS-000018

Rule Version

ZCTMR040

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Configure the standard values for the BMC CONTROL-M security parameters for the specific ACP environment along with additional IOA security parameters with standard values as documented below.

Keyword Value
DEFMCHKM $$CTMEDM
SECTOLM NO
DFMM01 EXTEND
DFMM02 EXTEND
DFMM08 EXTEND
RACJCARD U
MSUBCHK NO

Check Contents

Refer to the following applicable reports produced by the z/OS Data Collection:

- IOA.RPT(SECPARM).

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCTM0040).

If the following keywords specify the values in the BMC CONTROL-M security parameter member, this is not a finding.

Keyword Value
DEFMCHKM $$CTMEDM
SECTOLM NO
DFMM01 EXTEND
DFMM02 EXTEND
DFMM08 EXTEND
RACJCARD U
MSUBCHK NO

Vulnerability Number

V-224404

Documentable

False

Rule Version

ZCTMR040

Severity Override Guidance

Refer to the following applicable reports produced by the z/OS Data Collection:

- IOA.RPT(SECPARM).

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCTM0040).

If the following keywords specify the values in the BMC CONTROL-M security parameter member, this is not a finding.

Keyword Value
DEFMCHKM $$CTMEDM
SECTOLM NO
DFMM01 EXTEND
DFMM02 EXTEND
DFMM08 EXTEND
RACJCARD U
MSUBCHK NO

Check Content Reference

M

Target Key

4136