Implementing Security for Batch › BATCH Considerations › Batch Job Options

Batch Job Options

CA Top Secret has a number of options to control how a batch job accesses the system. These include:

• Defining ACIDs through the DEFACID sub-option

  You can define a default ACID for the BATCH facility using the DEFACID sub-option of the FACILITY control option. Then define an ACID, or derive an ACID from the reader/terminal from which the job was submitted. This derived ACID is applied to any job without a valid ACID. Combining the derived ACID with IMPLEMENT mode lets you gradually define your batch processing. As you define a valid ACID for each job, the job no longer picks up the default ACID.

  Remove the default after you have completed your BATCH facility implementation to ensure that new batch processing cannot be introduced without being evaluated for the appropriate security controls.

• Deriving ACIDs from the JOB statement

  To initially minimize required JCL revisions, set the JOBACID control option to derive an ACID from information on the existing JOB statement. The use of JOBACID is recommended as an implementation strategy to be replaced with specific ACIDs when the BATCH implementation is complete.