STIGQter: STIG Summary: IBM zSecure Suite Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 02 Apr 2025:

IBM Security zSecure system administrators must install security-relevant zSecure software updates within the time period directed by an authoritative source (e.g., IAVMs, CTOs, DTMs, and STIGs).

DISA Rule

SV-259737r961683_rule

Vulnerability Number

V-259737

Group Title

SRG-APP-000456-MFP-000345

Rule Version

ZSEC-00-000240

Severity

CAT II

CCI(s)

• CCI-002605 - Install security-relevant software updates within an organization-defined time period of the release of the updates.

Weight

10

Fix Recommendation

Develop a procedure to install security-relevant software updates within the time period directed by an authoritative source (e.g., IAVMs, CTOs, DTMs, and STIGs).

Check Contents

Ask the system administrator for the procedure to install security-relevant software updates within the time period directed by an authoritative source (e.g., IAVMs, CTOs, DTMs, and STIGs.

If there is no procedure, this a finding.

Vulnerability Number

V-259737

Documentable

False

Rule Version

ZSEC-00-000240

Severity Override Guidance

Ask the system administrator for the procedure to install security-relevant software updates within the time period directed by an authoritative source (e.g., IAVMs, CTOs, DTMs, and STIGs.

If there is no procedure, this a finding.

Check Content Reference

M

Target Key

5574