The IBM z/VM JOURNALING statement must be coded on the configuration file.

If auditing is enabled late in the start-up process, the actions of some start-up processes may not be audited. Some audit systems also maintain state information only available if auditing is enabled before a given process is created.

Examine the Product configuration file.

If the "JOURNALING" statement does not specify "ON", this is a finding.

Configure the system configuration "JOURNALING" statement to "JOURNALING ON".