IBM Systems magazine, Mainframe - November/December 2019 - 13

new solutions with improved UIs
Ä ÈÃ)!$¯!)%NÃ
Organizations, therefore, are
taking the necessary steps to
ensure that core business systems
are accessible and are compatible with modern access methods,
which is increasing the demand for
solutions that deliver web-based/
!ÆÉIÉ ÄÆÉÈÃÄÇÇÉ%%Ã&!Ã)"-Ã:NÃ

Security, Privacy
and Compliance
With these changing methods of
access, and mainframe applications being increasingly exposed,
security and data privacy have nevÉ$ÃÆÉÉ Ã!$ÉÃ"!$&Ä &NÃ/$Ä  Ätions need to be concerned about
&É$ÃÄ $ÄÉÃÄ""ÇÄ&! %NÃ
These reliable, high-throughput applications serve as repositories of
business logic and data that include
"É$%! Ä1ÃÈÉ &®ÄÆÉà !$Ä&! Ã
c0))dQÃÇ'%&!É$î Ä ÇÄÃÈÉ&Ä%ÃÄ ÈÃ
intellectual property that must be
protected and are subject to regula&!$1Ã%ÉÇ'$&1ÃÄ'È&%NÃ
Corporations have been mindful
of protecting sensitive data across
the rest of the enterprise-leveraging modern security approaches
that include authentication and
authorization technologies connected to an enterprise-wide identity
Ä ÈÃÄÇÇÉ%%ÃÄ ÄÉÉ &Ã%1%&ÉNÃ) Ã
many cases, however, organizations
haven't extended those same securi&1ÃÇ! &$!%Ã&!Ã&ÉÃÄ $ÄÉNÃ)"-Ã:Ã
application security has typically
been separate from the rest of the
enterprise, because it's running in a
private network, is isolated from the
public environment and hasn't been
%ÉÉ ÃÄ%ÃÄÃ(ÄÆÉÃ&Ä$É&Ã!$ÃÄ&&ÄÇNÃ
In many cases, those in charge of
security might not even know how
to apply security controls to main$ÄÉÃÄ""ÇÄ&! %NÃ
Because of the private information
that's on mainframe systems, and due
to data privacy regulatory compliance
such as the Payment Card Industry
Data Security Standard (PCI DSS)
and General Data Protection Regulation, IBM Z application security

and data privacy is something that
organizations need to consider and
%&$É &É NÃ#!"Ä É%Ã'%&ÃÉÉ&Ã
the standards required to be deemed
compliant, to pass an audit as well as
"$É(É &ÃÆ$ÉÄÇÉ%ÃÄ ÈÃÄ&&ÄÇ%NÃ
A key approach to modern
security comes down to access con&$!NÃ/$Ä  Ä&! %Ã ÉÉÈÃ&!ÃÉ %'$ÉÃ
that users who access mainframe
applications can prove who they
are when logging in through two or
more factors tied to something they
know (a password), something they
have (smartcard/chip) or some& Ã&É1ÃÄ$ÉÃcÆ!É&$Ç%dNÃ4%Ã
is known as multifactor authentication (MFA), which extends well
beyond traditional eight-character,
ÇÄ%ÉI %É %&(ÉÃ"Ä%%)!$È%NÃ3&$! Ã
MFA, coupled with a consistent
application of the concept of "least
privilege" (allowing users to access
only the applications and data that
they need to do their job), forms the
ÆÄ%%Ã!$Ã%!ÈÃÄÇÇÉ%%ÃÇ! &$!NÃ
Modern MFA solutions are being
applied to enterprise application
access throughout organizations
that are leveraging modern identity and access management (IAM)
"Ä&!$%NÃ(!)É(É$QÃ&%Ã&1"ÉÃ!Ã
security control is, to a large extent,
not being utilized with mainframe
Ä""ÇÄ&! %NÃ4%Ã%ÃÆÉÇÄ'%ÉÃ&ÉÃ
identity source is an isolated, independent user directory that's sepÄ$Ä&ÉÃ$!Ã&ÉÃÇ!$"!$Ä&ÉÃ)!-NÃ4%Ã
can create a gap that the security
&ÉÄÃÈ!É% V&Ã !)Ã!)Ã&!ÃÇ$!%%N
3 ®ÇÄ &ÃÈÄ&ÄÃÆ$ÉÄÇÉ%ÃÄ(ÉÃ
occurred when bad actors have
gained credentialed access to
systems of record via passwords
compromised through social engiÉÉ$ Ã(ÉÇ&!$%Ã%'ÇÃÄ%Ã"% NÃ
-&!Ã"$!(ÈÉ%ÃÄÃ% ®ÇÄ &ÃÆÄ$$É$Ã
to these attack vectors and is becoming a staple of data security in
%ÉÇ'$&1Ã"!ÇÉ%ÃÄ ÈÃ$É'Ä&! %NÃ

3"®ÉÈÃ% È"! &Ã
Management
Endpoints that connect to mainframe applications must be manÄÉÈÃÄ ÈÃÄÈ %&É$ÉÈÃ"$!"É$1NÃ

Terminal emulation customers
who have not yet implemented
strict controls for how the products can be used could quickly
face a situation where emulation
Ç! ®'$Ä&! îÉ%ÃcÉNNQÃ%É%%! Ã
Ä ÈÃÄÇ$!îÉ%dÃÆÉ Ã&!Ã%"$ÉÄÈÃÄ%Ã
&É1ÃÄ$ÉÃÇ!"ÉÈÃÄ! Ã'%É$%NÃ4%Ã
can lead to security risks (think
recorded macros that contain a
user's login credentials), along
with making the job of upgrading
the emulation environment more
È®Ç'&NÃ4É%ÉÃÄÇÇÉ%%ÃÉ È"! &%Ã
must be hardened along with the
Ä $ÄÉÃ&%ÉN
Modern terminal emulation solutions include security
controls for various types of
frequently accessed data; these
solutions should be regularly
updated with the latest versions
Ä ÈÃ%ÉÇ'$&1Ã"Ä&ÇÉ%NÃ(!)É(É$QÃ
depending on the size of the organization and how the software is
deployed, this can be a labor-intensive and time-consuming task
that requires multiple people to
perform the required testing and
ÈÉ"!1É &NÃ!%ÃÄÃ$É%'&QÃÄ 1Ã
organizations don't apply needed
security patches in a timely manÉ$Ã!$ÃÄ$ÉÃ$'  Ã!ÈÃ(É$%! %NÃ

The Solution
Modern terminal emulation solutions address the need to improve
ÄÇÇÉ%%ÃÇ! &$!NÃ4É1Ã%'""!$&Ã-&!Ã
frameworks, centralize provisioning to strengthen authorization
controls and lock down endpoints
with administrative controls that
&Ã'%É$ÃÇ! ®'$Ä&! ÃÇÄ É%Ã
Ä ÈÃÄÇ$!ÃÉ0ÉÇ'&! NÃ(4-,BI
based emulation solutions reduce
the number of devices that need
software security patches and limit
which users can connect to main$ÄÉÃÄ""ÇÄ&! %NÃ
With the right solution in place,
organizations can continue to
deliver reliable and convenient
access to IBM Z applications,
while ensuring security and data
privacy and facilitating regulatory
Ç!"Ä ÇÉNÃ

IBMSYSTEMSMAG.COM NOVEMBER/DECEMBER 2019 | 13


http://www.IBMSYSTEMSMAG.COM

IBM Systems magazine, Mainframe - November/December 2019

Table of Contents for the Digital Edition of IBM Systems magazine, Mainframe - November/December 2019

Table of Contents
Editor's Desk: Keeping up to date
Currents: University introduces a new program to develop mainframe skills
Currents: On the web
Currents: Shattering the glass ceiling: Female pioneers in tech history
Partner POV: Secure IBM Z application access with multifactor authentication, endpoint management and more
Cover Story: Next-Gen Security and Resiliency for Hybrid Multicloud: The IBM z15 provides the cloud you want with the privacy you need
Feature 1: Move on up: The IBM Client Advocacy and Systems Assurance team and the RevitaliZ program help keep clients up to date with the latest IBM Z technology
Feature 2: A Closer Look at the 2018 Master the Mainframe Winners: Past winners talk about their experiences with the contest
TECH Showcase: Why pervasive encryption on IBM Z is the gold standard in data protection
Techbits: How has quantum computing evolved?
Techbits: Ask the expert: zERT Discovery, zERT Aggregation and zERT Network Analyzer
Beyond the Box: Mark Nelson maintains tradition as director of the IBM Mid-Hudson Valley Club Chorus
Reference Point - Global Events, Education, Resources for Power Systems
2019 Mainframe Solutions Edition Product Index
IBM Systems magazine, Mainframe - November/December 2019 - Intro
IBM Systems magazine, Mainframe - November/December 2019 - Cover1
IBM Systems magazine, Mainframe - November/December 2019 - Cover2
IBM Systems magazine, Mainframe - November/December 2019 - 1
IBM Systems magazine, Mainframe - November/December 2019 - 2
IBM Systems magazine, Mainframe - November/December 2019 - 3
IBM Systems magazine, Mainframe - November/December 2019 - 4
IBM Systems magazine, Mainframe - November/December 2019 - 5
IBM Systems magazine, Mainframe - November/December 2019 - Editor's Desk: Keeping up to date
IBM Systems magazine, Mainframe - November/December 2019 - 7
IBM Systems magazine, Mainframe - November/December 2019 - Currents: University introduces a new program to develop mainframe skills
IBM Systems magazine, Mainframe - November/December 2019 - CT1
IBM Systems magazine, Mainframe - November/December 2019 - CT2
IBM Systems magazine, Mainframe - November/December 2019 - Currents: On the web
IBM Systems magazine, Mainframe - November/December 2019 - Currents: Shattering the glass ceiling: Female pioneers in tech history
IBM Systems magazine, Mainframe - November/December 2019 - 11
IBM Systems magazine, Mainframe - November/December 2019 - Partner POV: Secure IBM Z application access with multifactor authentication, endpoint management and more
IBM Systems magazine, Mainframe - November/December 2019 - 13
IBM Systems magazine, Mainframe - November/December 2019 - 14
IBM Systems magazine, Mainframe - November/December 2019 - 15
IBM Systems magazine, Mainframe - November/December 2019 - Cover Story: Next-Gen Security and Resiliency for Hybrid Multicloud: The IBM z15 provides the cloud you want with the privacy you need
IBM Systems magazine, Mainframe - November/December 2019 - 17
IBM Systems magazine, Mainframe - November/December 2019 - 18
IBM Systems magazine, Mainframe - November/December 2019 - 19
IBM Systems magazine, Mainframe - November/December 2019 - 20
IBM Systems magazine, Mainframe - November/December 2019 - 21
IBM Systems magazine, Mainframe - November/December 2019 - Feature 1: Move on up: The IBM Client Advocacy and Systems Assurance team and the RevitaliZ program help keep clients up to date with the latest IBM Z technology
IBM Systems magazine, Mainframe - November/December 2019 - 23
IBM Systems magazine, Mainframe - November/December 2019 - 24
IBM Systems magazine, Mainframe - November/December 2019 - 25
IBM Systems magazine, Mainframe - November/December 2019 - 26
IBM Systems magazine, Mainframe - November/December 2019 - 27
IBM Systems magazine, Mainframe - November/December 2019 - Feature 2: A Closer Look at the 2018 Master the Mainframe Winners: Past winners talk about their experiences with the contest
IBM Systems magazine, Mainframe - November/December 2019 - 29
IBM Systems magazine, Mainframe - November/December 2019 - 30
IBM Systems magazine, Mainframe - November/December 2019 - 31
IBM Systems magazine, Mainframe - November/December 2019 - 32
IBM Systems magazine, Mainframe - November/December 2019 - TECH Showcase: Why pervasive encryption on IBM Z is the gold standard in data protection
IBM Systems magazine, Mainframe - November/December 2019 - 34
IBM Systems magazine, Mainframe - November/December 2019 - 35
IBM Systems magazine, Mainframe - November/December 2019 - 36
IBM Systems magazine, Mainframe - November/December 2019 - Techbits: How has quantum computing evolved?
IBM Systems magazine, Mainframe - November/December 2019 - 38
IBM Systems magazine, Mainframe - November/December 2019 - Techbits: Ask the expert: zERT Discovery, zERT Aggregation and zERT Network Analyzer
IBM Systems magazine, Mainframe - November/December 2019 - Beyond the Box: Mark Nelson maintains tradition as director of the IBM Mid-Hudson Valley Club Chorus
IBM Systems magazine, Mainframe - November/December 2019 - Cover3
IBM Systems magazine, Mainframe - November/December 2019 - Cover4
IBM Systems magazine, Mainframe - November/December 2019 - Reference Point - Global Events, Education, Resources for Power Systems
IBM Systems magazine, Mainframe - November/December 2019 - 2019 Mainframe Solutions Edition Product Index
IBM Systems magazine, Mainframe - November/December 2019 - SE2
IBM Systems magazine, Mainframe - November/December 2019 - SE3
http://www.ibmsystemsmagmainframedigital.com/mspcomm/ibmsystemsmag/ibmsystems_mainframe_20201112
http://www.ibmsystemsmagmainframedigital.com/mspcomm/ibmsystemsmag/ibmsystems_mainframe_20200910
http://www.ibmsystemsmagmainframedigital.com/mspcomm/ibmsystemsmag/ibmsystems_mainframe_20200708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20200506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20200304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20200102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2020mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20191112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/relevantz_20190102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2019mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20181112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2018mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20171112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_sesupp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_linuxsupp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20161112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/MainframeSecurity
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20151112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150910_se
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150910
http://www.ibmsystemsmagmainframedigital.com/MFSkills
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150506_supp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20141112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_gt_201405
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/BigData
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20131112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20121112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/buyersguide2013
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/ibmsystems_mainframe_2012bg
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20111112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20101112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100910_bg
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20091112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090506
https://www.nxtbook.com/nxtbooks/ibmsystemsmag/mainframe_20090304
https://www.nxtbookmedia.com