The IBM z/VM system administrator must develop procedures maintaining information system operation in the event of anomalies.

If anomalies are not acted upon, security functions may fail to secure the system.

Ask the system administrator for a procedure to notify appropriate personnel in the event of system anomalies or failure.

If there is no procedure for notification and resolution or they are not documented and on file with the ISSO, this is a finding.

Develop a procedure for the notification and resolution of operation information system operation anomalies.

Assure that procedures are documented and filed with the ISSO/ISSM.