Maintenance for security-related software updates for CA IDMS modules must be provided.

When a problem is found in IDMS, corrective maintenance is published to correct the problem (including security related problems). Published fixes should be applied to the IDMS system to correct any problems found.

Determining which PTFs have been applied, a query can be done to an SMP/E CSI using the IBM SMP/E utility.

New and existing PTFs must be reviewed using CA CARS or CSO in a timeframe determined by an authoritative source. If not, this is a finding.

Institute and adhere to policies and procedures to ensure that patches are consistently applied to the IDMS within the time allowed.