STIGQter: STIG Summary: zOS FEP for TSS Version: 6 Release: 1 Benchmark Date: 11 Mar 2020:

All hardware components of the FEPs are not placed in secure locations where they cannot be stolen, damaged, or disturbed

DISA Rule

SV-7195r3_rule

Vulnerability Number

V-6900

Group Title

ZFEP0011

Rule Version

ZFEP0011

Severity

CAT II

CCI(s)

• CCI-000933 - The organization employs organization-defined security safeguards to deter and/or prevent physical tampering or alteration of organization-defined hardware components within the information system.

Weight

10

Fix Recommendation

Ensure that hardware components of the FEPs are protected as specified below:

Physical security is the first level of security control for the FEPs. Install all hardware components of the FEPs in secure locations where they cannot be stolen, damaged, or disturbed. Make sure that FEP hardware is located in a secure area with limited access to authorized personnel.

Check Contents

a) Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- Documents and procedures restricting access to the hardware components of the FEPs.

b) If the hardware components of the FEPs are located in secure locations, there is NO FINDING.

c) If the hardware components of the FEPs are not located in secure locations, this is a FINDING.

Vulnerability Number

V-6900

Documentable

False

Rule Version

ZFEP0011

Severity Override Guidance

a) Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- Documents and procedures restricting access to the hardware components of the FEPs.

b) If the hardware components of the FEPs are located in secure locations, there is NO FINDING.

c) If the hardware components of the FEPs are not located in secure locations, this is a FINDING.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

3359

Comments