← Back to IBM z/OS ACF2 Security Technical Implementation Guide

V-223585

CAT II (Medium)

IBM z/OS system administrator must develop a procedure to offload SMF files to a different system or media than the system being audited.

Rule ID

SV-223585r959008_rule

STIG

IBM z/OS ACF2 Security Technical Implementation Guide

Version

V9R8

CCIs

CCI-001851

Discussion

Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.

Check Content

Ask the system administrator for the procedure to offload SMF files to a different system or media than the system being audited.

If the procedure does not exist, this is a finding.

Fix Text

Develop a procedure to offload SMF files to a different system or media than the system being audited.