IBM zVM Using CA VM:Secure Security Technical Implementation Guide

The IBM zVM Using CA VM:Secure Security Technical Implementation Guide (V2 R2) has 77 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

77STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Thu Oct 27 2022 What changed in V2R2

The IBM z/VM system administrator must develop procedures maintaining information system operation in the event of anomalies.

IBM zVM Using CA VM:Secure Security Technical Implementation Guide

Assessment Title

Rule Text

The IBM z/VM system administrator must develop procedures maintaining information system operation in the event of anomalies.

Description

Discussion Text

If anomalies are not acted upon, security functions may fail to secure the system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-237968

Rule

SV-237968r649744_rule

Severity

medium

Rule Version

IBMZ-VM-002380

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Ask the system administrator for a procedure to notify appropriate personnel in the event of system anomalies or failure.

If there is no procedure for notification and resolution or they are not documented and on file with the ISSO, this is a finding.

Implementation Procedure

Fix Text

Develop a procedure for the notification and resolution of operation information system operation anomalies.

Assure that procedures are documented and filed with the ISSO/ISSM.

STIG check 67 of 77 in the IBM zVM Using CA VM:Secure STIG checklist

← Previous · V-237967The IBM z/VM System administrator must develop routines and processes for notification in the event of audit failure.Next · V-237969 →IBM z/VM system administrator must develop procedures to manually control temporary, interactive, and emergency accounts.