The IBM z/VM system administrator must develop routines and processes for the proper configuration and maintenance of Software.

Proper configuration management procedures for information systems provide for the proper configuration and maintenance in accordance with local policies restrictions and/or rules. Failure to properly configure and maintain system software and applications on the information system could result in a weakened security posture.

Ask the system administrator (SA) for documented procedures and routines for proper configuration management of software.

If there are no procedures or the procedures are not documented and on file with the ISSO, this is a finding.

Develop a procedure for proper configuration of software components.

Include proper maintenance procedures.