IBM Mainframe Audits: z/OS & RACF

The IBM mainframe is a centralized large-scale computer system used in many companies for high volume data processing. Whether its transaction processing, database operations or web applications, the mainframe is critical infrastructure.

Our audit capabilities extend to all major subsystems and components. The unique risks and controls associated with mainframe systems are central to the planning and performance of an audit. We use industry best practices and methodologies as part of a holistic audit approach. Some of the areas that we cover in our mainframe audits are displayed to the right.

Continental Audit Services provides experienced auditors at competitive rates. Our auditors have worked in some of the world’s largest technology environments including those of large financial services companies.

Please contact Continental Audit Services to request a proposal tailored to meet your specific requirements.

Resource Access Control Facility (RACF) / Security Server
User and group profiles
Datasets /General resources profiles
Access control lists
Administrator accounts (Special, Auditor, Operations)
DSMON / SETROPTS reports
SYS1.PARMLIB / SYS1.PROCLIB
Supervisor Call routines (SVC)
Authorized Program Facility (APF) libraries
System and product exits
Time Sharing Option (TSO) / ISPF
JES2 – Job Entry (JES2PARM)
Communication Server (VTAM)
SNA, TCP/IP Configuration
SMS data management
DASD management
SMP/E and Change management
CICS transaction processing
MQ Series - message queuing
Unix System Services
SYSPLEX configuration
System Management Facility (SMF)
Monitoring – Omegamon, syslog
Performance metrics
Resource utilization
Capacity planning
Backup procedures, media, retention
Disaster recovery planning / testing