STIGQter: STIG Summary: IBM z/OS RACF Security Technical Implementation Guide Version: 8 Release: 3 Benchmark Date: 23 Apr 2021:

IBM z/OS must employ a session manager to manage display of the Standard Mandatory DoD Notice and Consent Banner.

DISA Rule

SV-223768r604139_rule

Vulnerability Number

V-223768

Group Title

SRG-OS-000023-GPOS-00006

Rule Version

RACF-OS-000120

Severity

CAT II

CCI(s)

• CCI-000048 - The information system displays an organization-defined system use notification message or banner before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.

Weight

10

Fix Recommendation

Configure any session manger in use to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.

Check Contents

Verify that any session manger in use displays the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.

If the session manager does not display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system, this is a finding.

Vulnerability Number

V-223768

Documentable

False

Rule Version

RACF-OS-000120

Severity Override Guidance

Verify that any session manger in use displays the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.

If the session manager does not display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system, this is a finding.

Check Content Reference

M

Target Key

4101

Comments