Ensure that SIT parameter SEC=YES is set in all regions

HighLevel 1Manual reviewcics

Description

The CICS SIT option SEC determines if security is enabled in CICS. It can be set to the following YES - Security is enabled NO - Security is disabled This is the most basic security parameter. It must always be set to YES, with the exception of sandbox regions in LPARs which are totally isolated.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Issue the z/OSMF Compliance data collection REST API to drive collection of compliance evidence in the SMF 1154 record. https://{host}:{port}/zosmf/compliance/rest/v1/facts 1. Customize and run the DFH$54P sample JCL to create a spreadsheet containing data for all of the CICS TS regions. 2. Open the spreadsheet and review the settings of the SEC column. They must all be set to YES.

How it is fixed

Fix method: Guidance or infrastructure patch

Set SEC=YES Restart CICS

Properties

Operating systems: Any
Tags: cicshardening
Reference: CIS IBM CICS Transaction Server 6.1 Benchmark v1.1.0 - 1.3.1 Ensure that SIT parameter SEC=YES is set in all regions