← Back to CA IDMS Security Technical Implementation Guide

V-251650

CAT II (Medium)

Maintenance for security-related software updates for CA IDMS modules must be provided.

Rule ID

SV-251650r1001008_rule

STIG

CA IDMS Security Technical Implementation Guide

Version

V2R1

CCIs

CCI-002605

Discussion

When a problem is found in IDMS, corrective maintenance is published to correct the problem (including security related problems). Published fixes should be applied to the IDMS system to correct any problems found.

Check Content

Determining which PTFs have been applied, a query can be done to an SMP/E CSI using the IBM SMP/E utility.

New and existing PTFs must be reviewed using CA CARS or CSO in a timeframe determined by an authoritative source. If not, this is a finding.

Fix Text

Institute and adhere to policies and procedures to ensure that patches are consistently applied to the IDMS within the time allowed.