The IBM z/VM system administrator must develop routines and processes for the proper configuration and maintenance of Software.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-237965	IBMZ-VM-002350	SV-237965r649735_rule		Medium

Description

Proper configuration management procedures for information systems provide for the proper configuration and maintenance in accordance with local policies restrictions and/or rules. Failure to properly configure and maintain system software and applications on the information system could result in a weakened security posture.

STIG	Date
IBM zVM Using CA VM:Secure Security Technical Implementation Guide	2022-08-31

Details

Check Text (C-41175r649733_chk)

Ask the system administrator (SA) for documented procedures and routines for proper configuration management of software.

If there are no procedures or the procedures are not documented and on file with the ISSO, this is a finding.

Fix Text (F-41134r649734_fix)

Develop a procedure for proper configuration of software components.

Include proper maintenance procedures.