IBM z/OS must employ a session manager to manage display of the Standard Mandatory DoD Notice and Consent Banner.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-223768	RACF-OS-000120	SV-223768r958390_rule		Medium

Description

Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. All methods of gaining access to the system must comply with this requirement to assure that regulations are upheld.

STIG	Date
IBM z/OS RACF Security Technical Implementation Guide	2025-06-24

Details

Check Text (C-25441r514992_chk)

Verify that any session manger in use displays the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.

If the session manager does not display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system, this is a finding.

Fix Text (F-25429r514993_fix)

Configure any session manger in use to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.