CA IDMS Security Technical Implementation Guide

The CA IDMS Security Technical Implementation Guide (V2 R2) has 74 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

74STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Wed Jul 01 2026 What changed in V2R2

Maintenance for security-related software updates for CA IDMS modules must be provided.

CA IDMS Security Technical Implementation Guide

Assessment Title

Rule Text

Maintenance for security-related software updates for CA IDMS modules must be provided.

Description

Discussion Text

When a problem is found in IDMS, corrective maintenance is published to correct the problem (including security related problems). Published fixes should be applied to the IDMS system to correct any problems found.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-251650

Rule

SV-251650r1137667_rule

Severity

medium

Rule Version

IDMS-DB-000890

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determining which PTFs have been applied, a query can be done to an SMP/E CSI using the IBM SMP/E utility.

New and existing PTFs must be reviewed using CA CARS or CSO in a timeframe determined by an authoritative source. If not, this is a finding.

Implementation Procedure

Fix Text

Institute and adhere to policies and procedures to ensure that patches are consistently applied to the IDMS within the time allowed.

STIG check 69 of 74 in the CA IDMS STIG checklist

← Previous · V-251649IDMS must check for invalid data and behave in a predictable manner when encountered.Next · V-251652 →The DBMS must develop a procedure to limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.