IBM z/OS must employ a session manager to manage display of the Standard Mandatory DoW Notice and Consent Banner.

Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. All methods of gaining access to the system must comply with this requirement to assure that regulations are upheld.

Verify that any session manger in use displays the Standard Mandatory DoW Notice and Consent Banner before granting access to the system.

If the session manager does not display the Standard Mandatory DoW Notice and Consent Banner before granting access to the system, this is a finding.

Configure any session manger in use to display the Standard Mandatory DoW Notice and Consent Banner before granting access to the system.