IBM zSecure RACF and SMF Auditing

Course overview

Learn how to use zSecure Audit to audit RACF, z/OS, and subsystems and generate SMF reports.

This course describes audit concerns that IBM® Security zSecure™ Audit reports. The course explains auditing your RACF® database and z/OS subsystems such as CICS, IMS, and DB2. You can measure your security and z/OS system settings against the security requirements of a selected policy level. Also, you learn about an Access Monitor data set containing historic RACF access decisions statistics. This information is used to find profiles, permissions, or connections that are unused and can be removed from the RACF database. Furthermore, you learn reviewing the general SMF and RACF audit settings. This course explains how to use and interpret predefined SMF reports, and how to create customized SMF reports. Finally, the Library and sequential data set status and change analysis functions are explained.

Please contact ibmlearning@ibm.com for enrollment information.

Who should attend

This training is targeted for RACF security administrators and auditors who are responsible for administering RACF, generating audit reports, and auditing RACF and z/OS security. RACF and z/OS compliance officers also benefit from attending this training.

Prerequisites

Before taking this course, make sure that you have the following skills: • Basic knowledge of, and experience with, the z/OS platform, RACF, and zSecure • The ability to log on to TSO and use ISPF panels If applicable, you can achieve these skills by attending one or more of the following courses: • IBM Security zSecure Admin Basic Administration and Reporting TK263 • Basics of z/OS RACF Administration ES19G • Effective RACF Administration BE87G

Delivery formats

• • Instructor-led online (virtual classroom)
• • Instructor-led on-site at your premises
• • Self-paced online training
• • Private/closed group delivery for corporate teams

Related and follow-on courses

• TK234G — IBM zSecure CARLa Auditing and Reporting Language (Advanced)
• TK274G — IBM zSecure Audit Rule-based Compliance Evaluation and Customization (Advanced)
• 8I101XG — MaaS360 integrations to enhance security posture (Intermediate)
• TK224G — IBM zSecure UNIX System Services (USS) Security Overview (Intermediate)