STIGQter: STIG Summary: IBM z/VM Using CA VM:Secure Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 27 Apr 2018:

The IBM z/VM system administrator must develop routines and processes for the proper configuration and maintenance of Software.

DISA Rule

SV-93683r1_rule

Vulnerability Number

V-78977

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

IBMZ-VM-002350

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Develop a procedure for proper configuration of software components.

Include proper maintenance procedures.

Check Contents

Ask the system administrator (SA) for documented procedures and routines for proper configuration management of software.

If there are no procedures or the procedures are not documented and on file with the ISSO, this is a finding.

Vulnerability Number

V-78977

Documentable

False

Rule Version

IBMZ-VM-002350

Severity Override Guidance

Ask the system administrator (SA) for documented procedures and routines for proper configuration management of software.

If there are no procedures or the procedures are not documented and on file with the ISSO, this is a finding.

Check Content Reference

M

Target Key

3211

Comments