STIGQter STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 24 Jan 2020:

The Mainframe Product, upon detection of a potential integrity violation, must initiate one or more of the following actions: generate an audit record, alert the current user, alert personnel or roles as defined in the site security plan, and/or perform other actions as defined in site security plan.

DISA Rule

SV-82999r1_rule

Vulnerability Number

V-68509

Group Title

SRG-APP-000485-MFP-000384

Rule Version

SRG-APP-000485-MFP-000384

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Mainframe Product to alert the current user, alert personnel or roles as defined in site security plan, and/or perform other actions as defined in site security plan.

Check Contents

If the Mainframe Product has no function or capability for integrity verification, this is not applicable.

Examine installation and configuration settings.

If the Mainframe Product is not configured to generate an audit record, alert the current user, alert personnel or roles as defined in site security plan, and/or perform other actions as defined in site security plan, this is a finding.

Vulnerability Number

V-68509

Documentable

False

Rule Version

SRG-APP-000485-MFP-000384

Severity Override Guidance

If the Mainframe Product has no function or capability for integrity verification, this is not applicable.

Examine installation and configuration settings.

If the Mainframe Product is not configured to generate an audit record, alert the current user, alert personnel or roles as defined in site security plan, and/or perform other actions as defined in site security plan, this is a finding.

Check Content Reference

M

Target Key

3061

Comments