STIGQter: STIG Summary: z/OS Front End Processor for ACF2 Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

A documented procedure is not available instructing how to load and dump the FEP NCP (Network Control Program).

DISA Rule

SV-230185r1141761_rule

Vulnerability Number

V-230185

Group Title

SRG-OS-000480

Rule Version

ZFEP0013

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-000504 - Include a full recovery and reconstitution of the system to a known state as part of contingency plan testing.

Weight

10

Fix Recommendation

If documented procedures for loading and dumping the FEP NCP (Network Control Program) are not available. Create a procedure document for dumping and loading the FEP and make sure that they are available to the ISSO and to authorized personnel responsible to perform these functions.

Check Contents

Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- Documents and procedures regarding the NCP load and dump processes.

If a procedure is in place relative to the NCP load and dump processes, this is not a finding.

Vulnerability Number

V-230185

Documentable

False

Rule Version

ZFEP0013

Severity Override Guidance

Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- Documents and procedures regarding the NCP load and dump processes.

If a procedure is in place relative to the NCP load and dump processes, this is not a finding.

Check Content Reference

M

Target Key

5235