The IBM z/OS system administrator (SA) must develop a process to notify appropriate personnel when accounts are modified.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-223763	RACF-OS-000070	SV-223763r998360_rule		Medium

Description

Audit tools include, but are not limited to, vendor-provided and open source audit tools needed to successfully view and manipulate audit information system activity and records. Audit tools include custom queries and report generators.

STIG	Date
IBM z/OS RACF Security Technical Implementation Guide	2025-06-24

Details

Check Text (C-25436r998359_chk)

Ask the SA for the documented process to notify appropriate personnel when accounts are modified.

If there is no documented process, this is a finding.

Fix Text (F-25424r514978_fix)

Develop a documented develop a process to notify appropriate personnel when accounts are modified.