Violations, Logging, Reporting, and Auditing › Security Reports

Security Reports

CA Top Secret provides the following batch utilities to translate resource access attempts and security events into reports:

TSSCHART

TSSCHART is a batch utility that provides an overview of your security database architecture by generating block charts of ACIDs/owned-resource relationships. This functionality lets you examine your security hierarchy "at-a-glance" and can be helpful during your initial CA Top Secret implementation process. Scope restrictions are honored so that if a properly authorized DCA uses the TSSCHART utility, the block chart the DCA receives only illustrates the ACIDs and resource relationships within the DCA's department. To view the installation as a whole, the MSCA or a properly authorized SCA must run the utility.

TSSUTIL

TSSUTIL is a flexible report generator/extract utility that provides batch reports of any security-related events logged to the Audit/Tracking File and/or SMF. You can produce precisely focused reports to monitor all kinds of security events. Selection criteria for TSSUTIL includes:

• ACIDs
• Jobs
• Specific resources
• Resource types
• Facilities
• Zones
• Divisions
• Departments
• Dates
• Types of access
• CPUs
• Violations
• Audited incidents

TSSCFILE

• TSSCFILE is a batch utility that produces a fixed-format output file whose records parallel the TSS LIST command output. You can then use this file with a site or vendor extract tool to write customized reports based on the configuration and content of your security database. As with the other batch reporting options, scope and administrative authority limitations are honored.

TSSREPORT and TSSREPORT2

Under CA Top Secret for z/OS, TSSREPORT and TSSREPORT2 use the output of TSSCFILE and TSSUTIL, respectively, to produce pre-formatted CA Earl reports. You can choose from several different report layouts, and depending on your current needs and familiarity with CA Earl, you can design additional layouts.

TSSRPTST (z/OS only)

The SAF Trace Report lets you display the monitored RACROUTE parameter list passed by requests for SAF services. This report also displays additional environmental information, such as job name, user ID, and the program issuing the SAF call.

The TSSRPTST report formats and displays the output the SAF SECTRACE command sends to SMF. To run the TSSRPTST report, you must have already run the SAF SECTRACE operator command and set the output destination to SMF. With few exceptions, CA Top Secret processes all z/OS SAF security requests by default.

For information about these reports, see the Report and Tracking Guide.