STIGQter: STIG Summary: CA IDMS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 01 Jul 2026:

Maintenance for security-related software updates for CA IDMS modules must be provided.

DISA Rule

SV-251650r1137667_rule

Vulnerability Number

V-251650

Group Title

SRG-APP-000456-DB-000390

Rule Version

IDMS-DB-000890

Severity

CAT II

CCI(s)

• CCI-002605 - Install security-relevant software updates within an organization-defined time period of the release of the updates.

Weight

10

Fix Recommendation

Institute and adhere to policies and procedures to ensure that patches are consistently applied to the IDMS within the time allowed.

Check Contents

Determining which PTFs have been applied, a query can be done to an SMP/E CSI using the IBM SMP/E utility.

New and existing PTFs must be reviewed using CA CARS or CSO in a timeframe determined by an authoritative source. If not, this is a finding.

Vulnerability Number

V-251650

Documentable

False

Rule Version

IDMS-DB-000890

Severity Override Guidance

Determining which PTFs have been applied, a query can be done to an SMP/E CSI using the IBM SMP/E utility.

New and existing PTFs must be reviewed using CA CARS or CSO in a timeframe determined by an authoritative source. If not, this is a finding.

Check Content Reference

M

Target Key

5418