STIGQter: STIG Summary: zOS FEP for TSS Version: 6 Release: 1 Benchmark Date: 11 Mar 2020:

A documented procedure is not available instructing how to load and dump the FEP NCP (Network Control Program).

DISA Rule

SV-7197r3_rule

Vulnerability Number

V-6902

Group Title

ZFEP0013

Rule Version

ZFEP0013

Severity

CAT II

CCI(s)

• CCI-000504 - The organization includes a full recovery and reconstitution of the information system to a known state as part of contingency plan testing.

Weight

10

Fix Recommendation

If documented procedures for loading and dumping the FEP NCP (Network Control Program) are not available. Create a procedure document for dumping and loading the FEP and make sure that they are available to the IAO and to authorized personnel responsible to perform these functions.

Check Contents

a) Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- Documents and procedures regarding the NCP load and dump processes.

b) If a procedure is in place relative to the NCP load and dump processes, there is NO FINDING.

c) If no procedure is in place relative to the NCP load and dump processes, this is a FINDING.

Vulnerability Number

V-6902

Documentable

False

Rule Version

ZFEP0013

Severity Override Guidance

a) Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:

- Documents and procedures regarding the NCP load and dump processes.

b) If a procedure is in place relative to the NCP load and dump processes, there is NO FINDING.

c) If no procedure is in place relative to the NCP load and dump processes, this is a FINDING.

Check Content Reference

M

Target Key

3359

Comments