Defining CICS to CA Top Secret › Facilities Matrix

Facilities Matrix

Most data centers have multiple CICS regions-each region having its own purpose. These regions are, at a minimum, segregated for test and production usage. Users who sign on to test regions are generally allowed greater freedom in accessing data and issuing transactions than a user who signs on to production regions.

In addition, it might be desirable to have many users access a certain region, such as one dedicated to CA‑eMAIL+ or a similar application, while limiting a select group of users to a sensitive region, such as one dedicated to customer inquiry.

To describe your CICS region, you must associate an CA Top Secret facility with the region via an entry in the Facility Matrix Table. Using this table, CA Top Secret allows each region to be associated with a separate facility or for several regions to be associated with the same facility.

The Facilities Matrix contains general and CICS‑specific suboptions of the CA Top Secret FACILITY control option. You can configure these suboptions in the Facilities Matrix to customize your CICS security on a facility‑by‑facility basis. For example, you can tailor access with Bypass Lists, set terminal LOCKTIME thresholds, and control CICS security parameters with these suboptions.

For information on the FACILITY suboptions, see the Control Options Guide. For information on how to configure these, see the chapter, “Implementing Security.”