TMA-IBM-Z-2.2.3
Ensure that PASSWORD protection for data sets is not used
HighLevel 1Manual reviewibm-z
Description
All protection of system resources must come from RACF. If multiple protection mechanisms are in place, the accessibility of data, specifically under contingency plan execution, is subject to compromise.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Interview question to check if system PASSWORD data set and OS passwords are being used.
How it is fixed
Fix method: Guidance or infrastructure patch
Migrate from PASSWORD protection for data sets to RACF profiles in the DATASET class.
Properties
- Operating systems
- Any
- Tags
- ibm-zpassword-policy
- Reference
- CIS IBM z/OS with RACF Benchmark v1.0.0 - 2.2.3 Ensure that PASSWORD protection for data sets is not used