STIGs RMF Controls Compare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

Browse STIGs
Search
RMF Controls
Compare Versions

Resources

About
Release Notes
VPAT
DISA STIG Library

STIGs updated 7 hours ago

Powered by Pylon

© 2026 Beacon Cloud Solutions, Inc. All rights reserved.

← CM-4 (2) — Impact Analyses

CCI-000336

Definition

After system changes, verify that the impacted controls are operating as intended, meeting the security requirements for the system.

Parent Control

CM-4 (2)Impact AnalysesConfiguration Management

Linked STIG Checks (13)

V-222625CAT IIExecution flow diagrams and design documents must be created to show how deadlock and recursion issues in web services are being mitigated.Application Security and Development Security Technical Implementation Guide V-224254CAT IIBMC Mainview for z/OS Resource Class will be defined or active in the ACP.z/OS BMC MAINVIEW for z/OS for ACF2 Security Technical Implementation Guide V-224428CAT IIBMC Mainview for z/OS Resource Class will be defined or active in the ACP.z/OS BMC MAINVIEW for z/OS for RACF Security Technical Implementation Guide V-224613CAT IIBMC Mainview for z/OS Resource Class must be defined or active in the ACP.z/OS BMC MAINVIEW for z/OS for TSS Security Technical Implementation Guide V-224457CAT IICA 1 Tape Management Resource Class will be defined or active in the ACP.z/OS CA 1 Tape Management for RACF Security Technical Implementation Guide V-224467CAT IICL/SuperSessions Resouce Class must be defined or active in the ACP.z/OS CL/SuperSession for RACF Security Technical Implementation Guide V-224656CAT IICL/SuperSession's Resouce Class is not defined or active in the ACP.z/OS CL/SuperSession for TSS Security Technical Implementation Guide V-224499CAT IIExternal RACF Classes are not active for CICS transaction checking.z/OS IBM CICS Transaction Server for RACF Security Technical Implementation Guide V-224322CAT IIIBM System Display and Search Facility (SDSF) Resource Class will be defined or active in the ACP.z/OS IBM System Display and Search Facility (SDSF) for ACF2 Security Technical Implementation Guide V-224511CAT IIIBM System Display and Search Facility (SDSF) Resource Class will be active in the RACF.z/OS IBM System Display and Search Facility (SDSF) for RACF Security Technical Implementation Guide V-224340CAT IIThe ROSCOE's Resource Class is not defined or active in the ACP.z/OS ROSCOE for ACF2 Security Technical Implementation Guide V-224533CAT IIThe Roscoe Resource Class will be defined or active in the ACP.z/OS ROSCOE for RACF Security Technical Implementation Guide V-225604CAT IIResource Class ROSRES is not defined or active in the Access Control Program (ACP).z/OS ROSCOE for TSS Security Technical Implementation Guide