STIGQter: STIG Summary: IBM z/OS TSS Security Technical Implementation Guide Version: 9 Release: 9 Benchmark Date: 01 Jul 2026:

IBM z/OS DFSMS control data sets must reside on separate storage volumes.

DISA Rule

SV-272878r1137691_rule

Vulnerability Number

V-272878

Group Title

SRG-OS-000080-GPOS-00048

Rule Version

TSS0-SM-000050

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-000549 - Maintain a redundant secondary system that is not collocated with the primary system.

Weight

10

Fix Recommendation

Allocate the primary and backup SMS Control data sets on separate volumes.

Source Control Data Set (SCDS) contains an SMS configuration, which defines a storage management policy.

Active Control Data Set (ACDS) contains a copy of the most recently activated configuration. All systems in an SMS complex use this configuration to manage storage.

Communications Data Set (COMMDS) contains the name of the ACDS containing the currently active storage management policy, the current utilization statistics for each system managed volume, and other system information.

The ACDS data set will reside on a different volume than the COMMDS data set.

Allocate backup copies of the ADCS and COMMDS data sets on a different shared volume from the primary ACDS and COMMDS data sets.

Check Contents

Review the logical parmlib data sets, for example SYS1.PARMLIB(IGDSMSxx), to identify the fully qualified file names for the following SMS data sets:
Active Control Data Set (ACDS)
Communications Data Set (COMMDS)

If the COMMDS and ACDS SMS data sets identified above reside on different volumes, this is not a finding.

If the COMMDS and ACDS SMS data sets identified above are collocated on the same volume, this is a finding.

Vulnerability Number

V-272878

Documentable

False

Rule Version

TSS0-SM-000050

Severity Override Guidance

Review the logical parmlib data sets, for example SYS1.PARMLIB(IGDSMSxx), to identify the fully qualified file names for the following SMS data sets:
Active Control Data Set (ACDS)
Communications Data Set (COMMDS)

If the COMMDS and ACDS SMS data sets identified above reside on different volumes, this is not a finding.

If the COMMDS and ACDS SMS data sets identified above are collocated on the same volume, this is a finding.

Check Content Reference

M

Target Key

4102