Ensure regular audits of AC=1 modules in APF authorized libraries are conducted

높음레벨 1수동 검토ibm-z

설명

The AC=1 modules that reside in APF authorized libraries should be reviewed annually. It is important maintain documentation identifying the integrity and justification of vendor APF authorized libraries. For non-vendor APF authorized libraries, the source and documentation identifying the integrity and justification that describes the AC=1 module process should be maintained.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Verify the AC=1 documentation and compare it to the actual content of the APF authorized libraries.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Any discrepancy must be fixed: documentation updated and/or libraries/modules removed.

속성

운영 체제: 모두
태그: ibm-zaudit
참고 자료: CIS IBM z/OS with RACF Benchmark v1.0.0 - 3.11 Ensure regular audits of AC=1 modules in APF authorized libraries are conducted