STIGQter: STIG Summary: zOS Front End Processor for TSS Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

A documented procedure is not available instructing how to load and dump the FEP NCP (Network Control Program).

DISA Rule

SV-224722r1145984_rule

Vulnerability Number

V-224722

Group Title

SRG-OS-000480

Rule Version

ZFEP0013

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-000504 - Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.

Weight

10

Fix Recommendation

If documented procedures for loading and dumping the FEP NCP (Network Control Program) are not available. Create a procedure document for dumping and loading the FEP and make sure that they are available to the ISSO and to authorized personnel responsible to perform these functions.

Check Contents

Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- Documents and procedures regarding the NCP load and dump processes.

If a procedure is in place relative to the NCP load and dump processes, this not a finding.

Vulnerability Number

V-224722

Documentable

False

Rule Version

ZFEP0013

Severity Override Guidance

Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- Documents and procedures regarding the NCP load and dump processes.

If a procedure is in place relative to the NCP load and dump processes, this not a finding.

Check Content Reference

M

Target Key

4193