STIGUI
V-251591CAT II — Medium severitySV-251591r1137654_rule

All installation-delivered IDMS Developer-level Programs must be properly secured.

Rule version IDMS-DB-000110 · STIG v2 · 2026-06-03

Discussion

Developer-level programs that are not secured may allow unauthorized users to access and manipulate various resources within the DBMS.

Satisfies: SRG-APP-000033-DB-000084, SRG-APP-000211-DB-000122

Check

The following are developer-level batch programs and are executed using JCL rather than the CV. As batch programs, they need to be secured in the external security manager (ESM) rather than through the SRTT.

Validate the following suggested developer-level programs are secured by the ESM. ADSOBCOM ADSORPTS IDMSDMLA IDMSDMLC IDMSDMLP IDMSLOOK IDMSRPTS RHDCMAP1 RHDCMPUT

Contact the security office to confirm that the programs in this list are secured. If they are not, this is a finding.

Fix

Contact the security office to confirm that the programs in this list are secured via the ESM and assigned to the appropriate users. Each program in the list must be secured.

Identifiers

Group ID
V-251591
Group title
SRG-APP-000033-DB-000084
Rule ID
SV-251591r1137654_rule
Check ID
C-55026r807638_chk
Fix ID
F-54980r807639_fix