STIGQter: STIG Summary: zOS Front End Processor for TSS Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

All hardware components of the FEPs are not placed in secure locations where they cannot be stolen, damaged, or disturbed

DISA Rule

SV-224720r1146377_rule

Vulnerability Number

V-224720

Group Title

SRG-OS-000480

Rule Version

ZFEP0011

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-000933 - Employ organization-defined anti-tamper technologies to deter and/or prevent physical tampering or alteration of organization-defined hardware components within the system.

Weight

10

Fix Recommendation

Ensure that hardware components of the FEPs are protected as specified below:

Physical security is the first level of security control for the FEPs. Install all hardware components of the FEPs in secure locations where they cannot be stolen, damaged, or disturbed. Make sure that FEP hardware is located in a secure area with limited access to authorized personnel.

Check Contents

Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- Documents and procedures restricting access to the hardware components of the FEPs.

If the hardware components of the FEPs are located in secure locations, this is not a finding.

Vulnerability Number

V-224720

Documentable

False

Rule Version

ZFEP0011

Severity Override Guidance

Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- Documents and procedures restricting access to the hardware components of the FEPs.

If the hardware components of the FEPs are located in secure locations, this is not a finding.

Check Content Reference

M

Target Key

4193