CA IDMS Security Technical Implementation Guide

The CA IDMS Security Technical Implementation Guide (V2 R1) has 74 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

74STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

ArchivedPublished Thu Oct 24 2024

All installation-delivered IDMS Database-Administrator-level programs must be properly secured.

CA IDMS Security Technical Implementation Guide

Assessment Title

Rule Text

All installation-delivered IDMS Database-Administrator-level programs must be properly secured.

Description

Discussion Text

DBA-level programs that are not secured may allow unauthorized users to use them to access and manipulate various resources within the DBMS.

Satisfies: SRG-APP-000033-DB-000084, SRG-APP-000211-DB-000122

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-251592

Rule

SV-251592r960792_rule

Severity

medium

Rule Version

IDMS-DB-000120

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

The following are DBA-level batch programs and are executed using JCL rather than the CV. As batch programs, they need to be secured for DBAs in the external security manager (ESM) (included in DCADMIN, DBADMIN level security) rather than through the SRTT.

Validate the following suggested DBA-level programs are secured by the ESM.
ADSOBSYS
ADSOBTAT
IDMSCHEM
IDMSDBN1
IDMSDBN2
IDMSDDDL
IDMSPASS
IDMSRSTC
IDMSUBSC
RHDCOMVS

Contact the security office to confirm that the programs in this list are secured. If not, this is a finding.

Implementation Procedure

Fix Text

Contact the security office to confirm that the programs in this list are secured via the ESM and assigned to the appropriate users. Each program in the list must be secured.

STIG check 11 of 74 in the CA IDMS STIG checklist

← Previous · V-251591All installation-delivered IDMS Developer-level Programs must be properly secured.Next · V-251593 →All installation-delivered IDMS DC-Administrator-level programs must be properly secured.