Batch ACID(s) submitted through RJE and NJE is (are) not sourced.

Associated with IA controls: DCCS-1, DCCS-2

Associated with: CCI-000764

SV-231r2_rule Batch ACID(s) submitted through RJE and NJE is (are) not sourced.

Vulnerability discussion

Jobs submitted through the RJE or NJE process will be sourced for submission to restrict the ACID so it can only be used from a specific remote number. This ensures that integrity is maintained. Without source restrictions, there is the potential job streams could be submitted from unauthorized locations.

Check content

a) Refer to the following report produced by the TSS Data Collection: - TSSCMDS.RPT(@ACIDS) Refer to the list of NJE/RJE batch jobs and each of the associated userids. b) Refer to data obtained from the site installation identifying batch type ACIDs. Ensure that all static batch ACIDs (ACIDs whose passwords never change) originating from a physical reader, RJE, or NJE are sourced to those readers such as (INTRDR, N12.IR, etc) with the appropriate source Syntax. c) If (b) above is complete, there is NO FINDING. d) If (b) above is incomplete, this is a FINDING.

Fix text

Ensure that all static batch ACIDs (ACIDs whose passwords never change) originating from a physical reader, RJE, or NJE are sourced to those readers such as (INTRDR, N12.IR, etc) with the appropriate source Syntax. Example: TSS ADD(batch-acid) SOURCE(device) Develop a plan of action and implement the changes as specified

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.