TSSAUDIT Utility › How to Monitor Security File Changes and Other Sensitive Data

How to Monitor Security File Changes and Other Sensitive Data

The TSSAUDIT batch utility allows an auditor to monitor changes to the CA Top Secret security file and monitor other sensitive MVS data. The type of security information depends on the control statements that you specify.

For example, you can use TSSAUDIT to perform the following tasks:

• List security information about modules in Authorized Program Facility (APF) libraries.
• List all changes to ACIDs or list changes during a range of dates or times.
• List MVS information about site‑written Supervisor Calls (SVCs), the Program Properties Table (PPT), and Terminal Monitor Program (TMP) authorized program lists.
• List security file information about one or more ACIDs (including attributes and privileges).

To use TSSAUDIT to monitor security file changes and monitor other sensitive data:

1. Ensure that you have authority to use TSSAUDIT.
2. Assemble JCL for the TSSAUDIT job.

   JCL includes the following components:

   • DD statements
   • Control statements
3. Submit the JCL to execute TSSAUDIT.

   TSSAUDIT provides output based on your specifications.

More information:

Sample Control Statements

Sample TSSAUDIT Listings