STIGUI
V-224404CAT II — Medium severitySV-224404r1144792_rule

BMC CONTROL-M configuration/parameter values must be specified properly.

Rule version ZCTMR040 · STIG v7 · 2025-09-27

Discussion

BMC CONTROL-M configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be weakened. This exposure may threaten the availability of the product applications, and compromise the confidentiality of customer data.

Check

Refer to the following applicable reports produced by the z/OS Data Collection:

- IOA.RPT(SECPARM).

Automated Analysis Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCTM0040).

If the following keywords specify the values in the BMC CONTROL-M security parameter member, this is not a finding.

Keyword Value DEFMCHKM $$CTMEDM SECTOLM NO DFMM01 EXTEND DFMM02 EXTEND DFMM08 EXTEND RACJCARD U MSUBCHK NO

Fix

Configure the standard values for the BMC CONTROL-M security parameters for the specific ACP environment along with additional IOA security parameters with standard values as documented below.

Keyword Value DEFMCHKM $$CTMEDM SECTOLM NO DFMM01 EXTEND DFMM02 EXTEND DFMM08 EXTEND RACJCARD U MSUBCHK NO

Identifiers

Group ID
V-224404
Group title
SRG-OS-000018
Rule ID
SV-224404r1144792_rule
Check ID
C-26081r1144791_chk
Fix ID
F-26069r518765_fix