STIGQter STIGQter: STIG Summary:

zOS WebSphere MQ for ACF2 Security Technical Implementation Guide

Version: 7

Release: 3 Benchmark Date: 01 Jul 2026

CheckedNameTitle
☐SV-224354r1212340_ruleWebSphere MQ channel security must be implemented in accordance with security requirements.
☐SV-224355r1144155_ruleWebSphere MQ channel security is not implemented in accordance with security requirements.
☐SV-224356r1144158_ruleProduction WebSphere MQ Remotes must utilize Certified Name Filters (CNF).
☐SV-224357r1144159_ruleUser timeout parameter values for WebSphere MQ queue managers are not specified in accordance with security requirements.
☐SV-224358r1144160_ruleWebSphere MQ started tasks are not defined in accordance with the proper security requirements.
☐SV-224359r1144162_ruleWebSphere MQ all update and alter access to MQSeries/WebSphere MQ product and system datasets are not properly restricted.
☐SV-224360r1144163_ruleWebSphere MQ resource classes must be properly activated.
☐SV-224361r1144164_ruleWebSphere MQ switch profiles must be properly defined to the appropriate class.
☐SV-224362r1144165_ruleWebSphere MQ connection class resources must be protected in accordance with security.
☐SV-224363r1144166_ruleWebSphere MQ dead letter and alias dead letter queues are not properly defined.
☐SV-224364r1144167_ruleWebSphere MQ queue resource defined to the MQQUEUE or MXQUEUE resource class must be protected in accordance with security requirements.
☐SV-224365r1144168_ruleWebSphere MQ Process resources must be protected in accordance with security requirements.
☐SV-224366r1144169_ruleWebSphere MQ Namelist resources must be protected in accordance with security requirements.
☐SV-224367r1144170_ruleWebSphere MQ alternate user resources defined to the appropriate resource class must be protected in accordance with security requirements.
☐SV-224368r1144172_ruleWebSphere MQ context resources defined to the appropriate resource class must be protected in accordance with security requirements.
☐SV-224369r1144194_ruleWebSphere MQ command resources defined to MQCMDS resource class are not protected in accordance with security requirements.
☐SV-224370r1144174_ruleWebSphere MQ RESLEVEL resources in the appropriate ADMIN resource class must be protected in accordance with security requirements.