New STIG Articles for Top Secret

[Scott Bohnert]

The following STIG articles for Top Secret were recently added:

• BTSS0152: Set the FACMODE Control Option
• BTSS0153: Set the JOBACID Control Option
• BTSS0154: Set the GOSETGID Control Option
• BTSS0155: Set the UNIQUSER Control Option
• BTSS0156: Set the MODLUSER Control Option
• BTSS0157: Set the DFLTRNGRU Control Option
• BTSS0158: Set the DFLTRNGG Control Option
• BTSS0159: Set the TIMELOCK Control Option
• BTSS0160: Set the CMDNUM Control Option
• BTSS0161: Set the SMFTYPE Control Option
• BTSS0162: Set the GENMSG Control Option
• BTSS0163: Set the TSSCMDOPTION Control Option
• BTSS0164: Set the GENNDT Control Option
• BTSS0165: Set the PTKRESCK Control Option
• BTSS0166: Set the PROFINTERVAL Control Option
• BTSS0167: Set the TEXTTSS Control Option
• BTSS0168: Set the ADABAS Control Option

For more information, see Top Secret STIG Articles by Findings.

------------------------------
Scott Bohnert
Staff Technical Writer
Broadcom
------------------------------

[Josef Thaler]

Hi Scott,

many thanks to bring attention to the newly provided STIG articles! 

Such and all those checks ask downright for automation.

So I'd like to ask, whether you have some sample JCL, from there those checks could be implemented.

I guess, this could be of interest in many installations.

Kind regards,
Josef

------------------------------
Josef
------------------------------

[Scott Bohnert]

Hi Joesf,

Thank you for your reply.

We are investigating making the STIG checks automated, and the product management team plans to reach out to customers to discuss this feature.

Best regards,
Scott

------------------------------
Scott Bohnert
Staff Technical Writer
Broadcom
------------------------------

[Josef Thaler]

Hello Scott,
sounds great, thank you for your work!

As automation solutions differ among installations I asked for and would suggest and prefer JCL using basic z/os utilities (TSO-Batch, Sort etc.) which could be implemented and scheduled as needed in any jobscheduling subystem.

Is there already an estimated target date for that feature? I'm asking to get a flavour, whether to start own efforts or to wait ...

Wouldn't it be an opportunity of coordinated collaboration among customers, each customer provides one (1) "neutral" sample JCL (only basic z/OS capabilities used, no site specific code) for an assigned specific STIG-check ... :-) ...   

Kind regards,
Josef
  ​

------------------------------
Josef
------------------------------

[Scott Bohnert]

Hi Josef,

If you have specific questions about our future STIG automation, please contact Bala Venkatachalam <[e-mail]>.

Best regards,
Scott

------------------------------
Scott Bohnert
Staff Technical Writer
Broadcom
------------------------------

[Eileen Becht]

Great Post Scott!! Thanks for the info :-)