Security / Governance, Risk & Compliance

IBM Security zSecure RACF Management Workshop

In this workshop, you will learn how to maintain a Resource Access Control Facility (RACF®) database using IBM® Security zSecure Admin and monitor the system using IBM Security zSecure Audit. During the hands-on exercises, you will be a RACF security administrator at a fictional company. In this simulated professional role, you will learn to define the RACF security environment for a specific department.

Issues

Describe the purpose and conduct of the RACF management workshop
Create a flexible RACF group structure for the department, based on PMI security principles and IT guidelines
Define department security administrator user ID, user IDs for feature authors, verify password quality, and create and refresh IBM Security zSecure CKFREEZE dataset
Create role-based feature groups, resource profiles and IBM Security zSecure UNLOAD dataset
Implement role-based access using connections and permissions to feature groups
Using and explaining the various verification functions of zSecure Admin, defining the task started, verifying the procedures started and managing changes of staff members
Review and, if applicable, maintain RACF audit settings and report and analyze SMF records recorded during the workshop
Prevent users with OPERATIONS from accessing PMI department data sets
Cleaning of RACF profiles and, where applicable, datasets and catalog aliases

Who is this training for?

This intermediate level RACF management workshop is designed for users responsible for managing and reporting on RACF profiles and permissions

Such users could be, for example, security administrators, compliance officers, system developers and potentially auditors

Prerequisites

Basic knowledge and experience with z/OS and RACF system
Ability to log into TSO, use ISPF panels, submit jobs and view job results
Familiarity and experience with the IBM Security zSecure Admin or Audit ISPF panel interface
IBM Security zSecure Admin Basic Administration and Reporting TK263G
Basics of RACF z/OS ES19G administration
Successful administration of the RACF BE87G

Training program

Create and refresh IBM Security datasets withSecure Admin UNLOAD and CKFREEZE
Maintain user profiles and RACF groups
Implement role-based access with feature groups
Define, maintain and check RACF data set profiles
Using and explaining the Verify Protect all, All not empty and Password functions
Defining and verifying running procedures
Review RACF audit settings and maintain them if necessary
Reporting and checking SMF records
Cleaning of RACF profiles and data sets and catalog aliases, if necessary

Delivery Methods

Online

Convenience of participating from anywhere
Interactive live sessions with trainer
Materials available for 30 days
No travel costs

On-site

Direct contact with trainer and group
Intensive hands-on workshops
Networking with other participants
Full focus on learning

Frequently asked questions

What are the prerequisites for this training?

For IBM Security zSecure RACF Management Workshop we recommend: Basic knowledge and experience with z/OS and RACF system; Ability to log into TSO, use ISPF panels, submit jobs and view job results; Familiarity and experience with the IBM Security zSecure Admin or Audit ISPF panel interface.

What is the format and duration of this training?

The training lasts 2 days and is available in online and on-site format. Sessions run from 9:00 AM to 4:00 PM. We can also customize the schedule to fit your team's needs.

Who is this training designed for?

This training is designed for: This intermediate level RACF management workshop is designed for users responsible for managing and reporting on RACF profiles and permissions; Such users could be, for example, security administrators, compliance officers, system developers and potentially auditors.