STIGUI
V-224120CAT II — Medium severitySV-224120r1141467_rule

BMC CONTROL-M configuration/parameter values must be specified properly.

Rule version ZCTMA040 · STIG v7 · 2025-09-26

Discussion

BMC CONTROL-M configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be weakened. This exposure may threaten the availability of the product applications, and compromise the confidentiality of customer data.

Check

Refer to the following applicable reports produced by the z/OS Data Collection:

- IOA.RPT(SECPARM).

Automated Analysis Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCTM0040).

The following keywords will have the specified values in the BMC CONTROL-M security parameter member. This is not a finding.

Keyword Value DEFMCHKM $$CTMEDM SECTOLM NO DFMM01 EXTEND DFMM02 EXTEND DFMM08 EXTEND SAFJCARD U MSUBCHK NO

Fix

Configure the standard values for the BMC CONTROL-M security parameters for the specific ACP environment along with additional IOA security parameters with standard values as documented below.

Keyword Value DEFMCHKM $$CTMEDM SECTOLM NO DFMM01 EXTEND DFMM02 EXTEND DFMM08 EXTEND SAFJCARD U MSUBCHK NO

Identifiers

Group ID
V-224120
Group title
SRG-OS-000080
Rule ID
SV-224120r1141467_rule
Check ID
C-25793r1141466_chk
Fix ID
F-25781r518738_fix