V-224483
SV-224483r1144830_rule
CAT II
All hardware components of the FEPs are not placed in secure locations where they cannot be stolen, damaged, or disturbed
From: z/OS Front End Processor for RACF Security Technical Implementation Guide (V7R2)
Description
<VulnDiscussion>If components of the FEPs are not properly protected, they can be stolen, damaged, or disturbed. Without adequate physical security, unauthorized users can access the control panel, the operator console, and the diskette drive of the service subsystem. Therefore, they can interfere with the normal operations of the FEPs. Improper control of FEP components could compromise network operations.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
Check Procedure
Review site documentation to validate that procedures are in place to protect the FEP service subsystem and diskette drive:
- Documents and procedures restricting access to the hardware components of the FEPs.
If the hardware components of the FEPs are located in secure locations, this is not a finding.
Fix Text
Ensure that hardware components of the FEPs are protected as specified below:
Physical security is the first level of security control for the FEPs. Install all hardware components of the FEPs in secure locations where they cannot be stolen, damaged, or disturbed. Make sure that FEP hardware is located in a secure area with limited access to authorized personnel.
CCI Reference
CCI-000366,CCI-000933- Created
- 2026-04-07 20:08:43
- Last Updated
- 2026-04-07 20:08:43