STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 24 Jan 2020:

The Mainframe Product must provide the capability for authorized users to select a user session to capture/record or view/hear.

DISA Rule

SV-82723r1_rule

Vulnerability Number

V-68233

Group Title

SRG-APP-000354-MFP-000136

Rule Version

SRG-APP-000354-MFP-000136

Severity

CAT II

CCI(s)

• CCI-001919 - The information system provides the capability for authorized users to select a user session to capture/record or view/hear.

Weight

10

Fix Recommendation

Configure the Mainframe Product to permit authorized users to select a user session to capture/record or view/hear.

If there is an ESM in use, configure ESM to restrict the ability to select sessions to capture/record or view/hear in accordance with applicable access control policies to system programmers or security administrators.

Check Contents

If the Mainframe Product has no function or capability for session operations, this is not applicable.

Examine installation and configuration settings.

Verify that the Mainframe Product has the capability to select user sessions for monitoring and allows system programmers and security administrators to select sessions to capture/record or view/hear in accordance with applicable access control policies.

If it does not, this is a finding.

If there is an external security manager (ESM) in use, verify that the ESM restricts the ability to select sessions to capture/record or view/hear in accordance with applicable access control policies to system programmers or security administrators.

If it does not, this is a finding.

Vulnerability Number

V-68233

Documentable

False

Rule Version

SRG-APP-000354-MFP-000136

Severity Override Guidance

If the Mainframe Product has no function or capability for session operations, this is not applicable.

Examine installation and configuration settings.

Verify that the Mainframe Product has the capability to select user sessions for monitoring and allows system programmers and security administrators to select sessions to capture/record or view/hear in accordance with applicable access control policies.

If it does not, this is a finding.

If there is an external security manager (ESM) in use, verify that the ESM restricts the ability to select sessions to capture/record or view/hear in accordance with applicable access control policies to system programmers or security administrators.

If it does not, this is a finding.

Check Content Reference

M

Target Key

3061

Comments