RACF & IBM mainframe security audit

anyone has a url / link that has a checklist on what to
audit in RACF & IBM Mainframe (MVS) ?

Don't want to buy an security / audit book on RACF
/IBM mainframe yet as currently exploring only
Who is Participating?
giltjrConnect With a Mentor Commented:
z/OS is on of the OS's that runs on IBM's zSeries Servers (a.k.a. mainframes) .  Past names include OS/390, MVS/ESA, MVS/XA, MVS (370 and SP), and OS 360/MVT.

However. you can also run z/VM, z/VSE and Linux on IBM's zSeries  Servers.

You can review NIST's STIG for RACF here:

sunhuxAuthor Commented:
Is z/OS another OS that runs on IBM mainframe & OS390
is a mainframe hardware model?

If I were to audit these, what are the main items to look
out for?
sunhuxAuthor Commented:
When I load that url & click on the link at the bottom that opens a PDF file, it gave the message:

NIST Closed, NIST and Affiliated Web Sites Not Available

Due to a lapse in government funding, the National Institute of Standards and Technology (NIST) is closed and most NIST and affiliated web sites are unavailable until further notice. We sincerely regret the inconvenience.
giltjrConnect With a Mentor Commented:
Yep, as of today the US Government is shutdown due to no approved budget.

Once they open back-up you will be able to download it.  I don't have a copy it or I would post it here.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.