IBM Systems Magazine, Mainframe - July/August 2016 - 38

SMF records written at every
stage of processing. SMF allows
organizations to understand
what's happening within the
system and perform detailed
forensic analysis in the event of
any incident. IBM has recently
begun offering tamper-resistant
SMF. By using digital signatures,
where users hash the data and
then encrypt the hash with their
private key, businesses can be
confident that the audit data is
secure. In many data breaches, it
was discovered that not only did
the hacker gain information, but
he also manipulated the audit
data to indicate that no breach
occurred. A tamper-resistant SMF
means the data contents and
source of the data can be verified
and trusted.
Multifactor authentication
is one way for organizations to
increase the assurance level
for users logging onto OSes
and applications by requiring
additional authentication factors,
such as passwords, PINs, ID
badges, cryptographic keys and
biometrics. IBM MFA for z/OS
extends RACF to authenticate
specified users with multiple
types of authentication. Using

these additional methods
provides another layer of security
and prevents attackers from using
stolen credentials to gain access
to confidential data. IBM MFA
for z/OS supports third-party
authentication systems, such as
RSA SecurID tokens.
In the future, IBM intends to
support the IBM TouchToken, a
timed, one-time-use password
generator token, and Common
Access Card/Personal Identity
Verification cards, which are
commonly used to authenticate in
the public sector enterprises.
Organizations struggle to
ensure that users have the
appropriate levels of access.
Privilege creep occurs when
people within the company move
from job to job but old credentials
aren't revoked. Separation of
duties is the idea of requiring
more than one person to complete
a specific task to prevent errors
and fraud; detecting and
remediating separation of duties
violations can be a continuous
and arduous process for most

More Resources
IBM Security Intelligence community: securityintelligence.com
IBM System Integrity: ibm.co/1WYXtUr
IBM X-Force Exchange: ibm.com/security/xforce
IBM Redbooks publication "Securing the IBM Mainframe":
ibm.co/26XP4W3
IBM Redbooks publication "End to End Security with z Systems":
ibm.co/21BcaOe

organizations. Both privilege
creep and improper separation of
duties can present tremendous
risks to organizations because one
person can hold too much power.
IBM Security Identity
Governance and Intelligence
was designed to address
identity management business
requirements of line of business
and compliance managers,
auditors, and risk managers. It
has the capability to perform
identity governance across the
entire enterprise, including
the fine-grained entitlements
within z Systems, from a single,
central solution.

Mission-Critical
z Systems
z Systems builds upon over
50 years of reliable, securable
technology that's changed to
meet evolving business needs.
IBM made security an integral
part of the mainframe from day
one, which sets it apart from
the competition. If a customer
discovers a bug or security
problem, IBM is committed to
fixing it.
As for the z Systems clients
and security professionals who
wish to join the fight against
cyberattacks, Kelley suggests
they look into joining the IBM
Security Intelligence community.
"We strongly encourage
security professionals and
analysts to join the over 2,000
organizations across 16 global
industries on X-Force Exchange,"
she says. "The bad guys are
increasing their skills through
collaboration-it's time the good
guys collaborate too."
Caroline Vitse is a freelance writer
based in Rochester, Minnesota.

38 // JULY/AUGUST 2016 ibmsystemsmag.com


http://www.securityintelligence.com http://ibm.co/1WYXtUr http://www.ibm.com/security/xforce http://ibm.co/26XP4W3 http://ibm.co/21BcaOe http://www.ibmsystemsmag.com

Table of Contents for the Digital Edition of IBM Systems Magazine, Mainframe - July/August 2016

Table of Contents
Editor's Desk: Security from every angle
IBM Perspective: Creating a secure foundation for hybrid cloud
Techbits: 'W' is for 'Watson'
Partner PoV: Get everyone in your organization on board with DevOps
It Today: Use analytics to improve DevOps effectiveness
Trends: Analytics can be your best defense against corporate fraud
R&D: IBM's data privacy and consent management technology provides greater control
Case Study: Head of the Class: Pacific Life gets ahead of retirement with Mainframe Academy training program
Cover Story: Defending Digital Domains: The z Systems mainframe proves to be a formidable defense system against cyberthieves
Feature: Securable z Systems: IBM offers platform-specific security solutions to address business needs and demands
Tech Showcase: A comprehensive backup and recovery solution is needed with always-available date
Sponsored Advertising Content: HotTECH Products
Tech Corner: Overview: The latest CICS and IMS updates place z Systems at the center of the API economy
Tech Corner: IMS: IBM IMS helps support innovation to stay competitive
Tech Corner: CICS: Getting started with architecting Java Enterprise Edition in CICS Transaction Server
Solutions: SUPERMON for Tubes, zHISR 2.7
Stop Run: IBMer finds his balance with hiking and mountaineering
Reference Point - Global Events, Education, Resources for Mainframe
2016 Mainframe Solutions Edition Product Index
IBM Systems Magazine, Mainframe - July/August 2016 - Intro
IBM Systems Magazine, Mainframe - July/August 2016 - Cover1
IBM Systems Magazine, Mainframe - July/August 2016 - Cover2
IBM Systems Magazine, Mainframe - July/August 2016 - 1
IBM Systems Magazine, Mainframe - July/August 2016 - Table of Contents
IBM Systems Magazine, Mainframe - July/August 2016 - 3
IBM Systems Magazine, Mainframe - July/August 2016 - 4
IBM Systems Magazine, Mainframe - July/August 2016 - 5
IBM Systems Magazine, Mainframe - July/August 2016 - Editor's Desk: Security from every angle
IBM Systems Magazine, Mainframe - July/August 2016 - 7
IBM Systems Magazine, Mainframe - July/August 2016 - IBM Perspective: Creating a secure foundation for hybrid cloud
IBM Systems Magazine, Mainframe - July/August 2016 - 9
IBM Systems Magazine, Mainframe - July/August 2016 - Techbits: 'W' is for 'Watson'
IBM Systems Magazine, Mainframe - July/August 2016 - 11
IBM Systems Magazine, Mainframe - July/August 2016 - Partner PoV: Get everyone in your organization on board with DevOps
IBM Systems Magazine, Mainframe - July/August 2016 - 13
IBM Systems Magazine, Mainframe - July/August 2016 - It Today: Use analytics to improve DevOps effectiveness
IBM Systems Magazine, Mainframe - July/August 2016 - 15
IBM Systems Magazine, Mainframe - July/August 2016 - 16
IBM Systems Magazine, Mainframe - July/August 2016 - 17
IBM Systems Magazine, Mainframe - July/August 2016 - Trends: Analytics can be your best defense against corporate fraud
IBM Systems Magazine, Mainframe - July/August 2016 - 19
IBM Systems Magazine, Mainframe - July/August 2016 - R&D: IBM's data privacy and consent management technology provides greater control
IBM Systems Magazine, Mainframe - July/August 2016 - 21
IBM Systems Magazine, Mainframe - July/August 2016 - 22
IBM Systems Magazine, Mainframe - July/August 2016 - 23
IBM Systems Magazine, Mainframe - July/August 2016 - Case Study: Head of the Class: Pacific Life gets ahead of retirement with Mainframe Academy training program
IBM Systems Magazine, Mainframe - July/August 2016 - 25
IBM Systems Magazine, Mainframe - July/August 2016 - 26
IBM Systems Magazine, Mainframe - July/August 2016 - 27
IBM Systems Magazine, Mainframe - July/August 2016 - Cover Story: Defending Digital Domains: The z Systems mainframe proves to be a formidable defense system against cyberthieves
IBM Systems Magazine, Mainframe - July/August 2016 - 29
IBM Systems Magazine, Mainframe - July/August 2016 - 30
IBM Systems Magazine, Mainframe - July/August 2016 - 31
IBM Systems Magazine, Mainframe - July/August 2016 - 32
IBM Systems Magazine, Mainframe - July/August 2016 - 33
IBM Systems Magazine, Mainframe - July/August 2016 - Feature: Securable z Systems: IBM offers platform-specific security solutions to address business needs and demands
IBM Systems Magazine, Mainframe - July/August 2016 - 35
IBM Systems Magazine, Mainframe - July/August 2016 - 36
IBM Systems Magazine, Mainframe - July/August 2016 - 37
IBM Systems Magazine, Mainframe - July/August 2016 - 38
IBM Systems Magazine, Mainframe - July/August 2016 - Tech Showcase: A comprehensive backup and recovery solution is needed with always-available date
IBM Systems Magazine, Mainframe - July/August 2016 - 40
IBM Systems Magazine, Mainframe - July/August 2016 - 41
IBM Systems Magazine, Mainframe - July/August 2016 - 42
IBM Systems Magazine, Mainframe - July/August 2016 - 43
IBM Systems Magazine, Mainframe - July/August 2016 - Sponsored Advertising Content: HotTECH Products
IBM Systems Magazine, Mainframe - July/August 2016 - 45
IBM Systems Magazine, Mainframe - July/August 2016 - 46
IBM Systems Magazine, Mainframe - July/August 2016 - 47
IBM Systems Magazine, Mainframe - July/August 2016 - 48
IBM Systems Magazine, Mainframe - July/August 2016 - 49
IBM Systems Magazine, Mainframe - July/August 2016 - Tech Corner: Overview: The latest CICS and IMS updates place z Systems at the center of the API economy
IBM Systems Magazine, Mainframe - July/August 2016 - 51
IBM Systems Magazine, Mainframe - July/August 2016 - 52
IBM Systems Magazine, Mainframe - July/August 2016 - 53
IBM Systems Magazine, Mainframe - July/August 2016 - Tech Corner: IMS: IBM IMS helps support innovation to stay competitive
IBM Systems Magazine, Mainframe - July/August 2016 - 55
IBM Systems Magazine, Mainframe - July/August 2016 - 56
IBM Systems Magazine, Mainframe - July/August 2016 - 57
IBM Systems Magazine, Mainframe - July/August 2016 - Tech Corner: CICS: Getting started with architecting Java Enterprise Edition in CICS Transaction Server
IBM Systems Magazine, Mainframe - July/August 2016 - 59
IBM Systems Magazine, Mainframe - July/August 2016 - 60
IBM Systems Magazine, Mainframe - July/August 2016 - 61
IBM Systems Magazine, Mainframe - July/August 2016 - 62
IBM Systems Magazine, Mainframe - July/August 2016 - Solutions: SUPERMON for Tubes, zHISR 2.7
IBM Systems Magazine, Mainframe - July/August 2016 - Stop Run: IBMer finds his balance with hiking and mountaineering
IBM Systems Magazine, Mainframe - July/August 2016 - Cover3
IBM Systems Magazine, Mainframe - July/August 2016 - Cover4
IBM Systems Magazine, Mainframe - July/August 2016 - Reference Point - Global Events, Education, Resources for Mainframe
IBM Systems Magazine, Mainframe - July/August 2016 - 2016 Mainframe Solutions Edition Product Index
IBM Systems Magazine, Mainframe - July/August 2016 - SE2
IBM Systems Magazine, Mainframe - July/August 2016 - SE3
IBM Systems Magazine, Mainframe - July/August 2016 - SE4
IBM Systems Magazine, Mainframe - July/August 2016 - SE5
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20191112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/relevantz_20190102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2019mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20181112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2018mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20171112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_sesupp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_linuxsupp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20161112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/MainframeSecurity
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20151112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150910_se
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150910
http://www.ibmsystemsmagmainframedigital.com/MFSkills
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150506_supp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20141112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_gt_201405
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/BigData
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20131112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20121112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/buyersguide2013
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/ibmsystems_mainframe_2012bg
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20111112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20101112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100910_bg
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20091112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090506
http://www.nxtbook.com/nxtbooks/ibmsystemsmag/mainframe_20090304
http://www.nxtbook.com/nxtbooks/mspcomm/ibmsystems_mainframe_200901
http://www.nxtbookMEDIA.com