STIGQter: STIG Summary: CA IDMS Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 01 Jul 2026:

The DBMS must develop a procedure to limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

DISA Rule

SV-251652r960735_rule

Vulnerability Number

V-251652

Group Title

SRG-APP-000001-DB-000031

Rule Version

IDMS-DB-000910

Severity

CAT II

CCI(s)

CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

Fix Recommendation

Require users to use specific JCL that includes exclusive access to a dataset used as a lock file. This would prevent more than one job from running at a time.

This would not allow multiple users to have one session active at a time, this would be one active session, no matter how many individual users are attempting to run the batch jobs.

The CA IDMS DBA must develop a Journal Analyzer procedure for authorized users to capture, record, and log all content related to a user.

Check Contents

Consult the system DBA and review system procedures for measures that establish a dataset to be used as a lock file.

If there is no such procedure, this is a finding.

Vulnerability Number

V-251652

Documentable

False

Rule Version

IDMS-DB-000910

Severity Override Guidance

Consult the system DBA and review system procedures for measures that establish a dataset to be used as a lock file.

If there is no such procedure, this is a finding.

Check Content Reference

Target Key

5418