Mainframe Security Services

Security configuration and controls defined in the External Security Manager (ESM) are examined for each database

Policies and procedures for formal and informal controls are evaluated for weaknesses

Poor or weak controls and protections for sensitive data, libraries, and user privileges are captured

A detailed report with summary, results, descriptions of vulnerabilities and a remediation project plan are delivered upon completion and reviewed with your team

Examine your mainframe environment using the following checks: Library access, password, public dataset, public resource, user SVC, MVS and JES2/JES3 command authority, RACF/TSS/ACF2 exit, JES2/JES3 spool dataset, MVS subsystem (IMS, Db2, CICS, NETView, etc.), MVS UNIX environment, and other miscellaneous checks

Perform vulnerability scanning to identify system integrity issues in code, OS, routines, Authorized Program Function Calls and more

Share a report and review of the findings, a remediation checklist, and a demonstration of discovered exploits