Mainframe Security Services

Following initial technical and scoping exercises:

• Security configuration and controls defined in the External Security Manager (ESM) are examined for each database
• Policies and procedures for formal and informal controls are evaluated for weaknesses
• Poor or weak controls and protections for sensitive data, libraries, and user privileges are captured
• A detailed report with summary, results, descriptions of vulnerabilities and a remediation project plan are delivered upon completion and reviewed with your team

After initial data collection of datasets, hardware configuration, and security information from RACF, ACF2 and TSS, our experts will:

• Examine your mainframe environment using the following checks: Library access, password, public dataset, public resource, user SVC, MVS and JES2/JES3 command authority, RACF/TSS/ACF2 exit, JES2/JES3 spool dataset, MVS subsystem (IMS, Db2, CICS, NETView, etc.), MVS UNIX environment, and other miscellaneous checks
• Perform vulnerability scanning to identify system integrity issues in code, OS, routines, Authorized Program Function Calls and more
• Share a report and review of the findings, a remediation checklist, and a demonstration of discovered exploits