STIGUI
V-224011CAT II — Medium severitySV-224011r958528_rule

The IBM z/OS Policy Agent must contain a policy that manages excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks.

Rule version TSS0-OS-000150 · STIG v9 · 2026-09-01

Discussion

DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.

Check

Examine the Policy Agent policy statements.

If it can be determined that there are policy statements that manages excess capacity, this is not a finding.

Fix

Develop Policy application and Policy agent to manage excess capacity.

Identifiers

Group ID
V-224011
Group title
SRG-OS-000142-GPOS-00071
Rule ID
SV-224011r958528_rule
Check ID
C-25684r516432_chk
Fix ID
F-25672r516433_fix