From Mainframe Product Security Requirements Guide
Part of SRG-APP-000090-MFP-000115
Associated with: CCI-000171
Without the capability to restrict which roles and individuals can select which events are audited, unauthorized personnel may be able to prevent the auditing of critical events. Misconfigured audits may degrade the system's performance by overwhelming the audit log. Misconfigured audits may also make it more difficult to establish, correlate, and investigate the events relating to an incident, or identify those responsible for one.
Examine the configuration settings. Verify the capability to select auditable events is restricted to security administrators or system programmers. If it is not, this is a finding.
Configure the Mainframe Product to restrict selection of auditable events to system programmers and security administrators.
Lavender hyperlinks in small type off to the right (of CSS
class id
, if you view the page source) point to
globally unique URIs for each document and item. Copy the
link location and paste anywhere you need to talk
unambiguously about these things.
You can obtain data about documents and items in other
formats. Simply provide an HTTP header Accept:
text/turtle
or
Accept: application/rdf+xml
.
Powered by sagemincer