The IBM z/VM JOURNALING statement must be properly configured.

By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.

View system config "JOURNALING" statement.

If the "JOURNALING" statement "LOGON" operand is configured as below, this is not a finding.

Logon, Account after 3 attempts, See IBMZ-VM-000040 for LOCKOUT setting.

Link, Account after 3 attempts, Disable after 3 attempts

Configure the system config "JOURNALING" statement to include the following:

Logon, Account after 3 attempts, See IBMZ-VM-000040 for LOCKOUT setting.

Link, Account after 3 attempts, Disable after 3 attempts