The IBM Security zSecure Audit Rule-based Compliance Evaluation & Customization training course introduces the IBM Security zSecure Audit rule-based compliance evaluation framework. The course discusses rule-based compliance evaluation concepts and includes an overview and demonstration of the supported compliance functions and reports. With the standard built-in compliance evaluation interface, you learn to report the compliance of systems against one or more of the supported external standards: STIG, GSD, or PCI-DSS.
The course teaches on how to customize the compliance evaluation for the supported standards to fit company’s requirements. Finally, you learn to create a company-defined compliance standard.
By attending IBM Security zSecure Audit Rule-based Compliance Evaluation & Customization workshop, delegates will learn to:
- Explain the concept of rule-based compliance evaluation with zSecure Audit
- Run compliance evaluations against the supported standards: GSD, STIG, and PCI-DSS
- Use the compliance evaluation results to apply the applicable changes to comply with the applicable (external) standard
- Customize compliance evaluation to fit with company security and audit policies
- Build customized company-specific compliance standards, rules, and tests
- Basic knowledge of and experience with z/OS and RACF
- Familiarity with the IBM Security zSecure Audit ISPF panel interface
- Knowledge of and experience with the CARLa programming language
This IBM Security zSecure Audit Rule-based Compliance Evaluation & Customization class is ideal for security administrators, auditors, and compliance officers.