ACF2

  • 1.  ACF2 CIA (Compliance Information Analysis)

    Posted Sep 08, 2017 12:02 PM

    There is a facility in ACF2 called CIA, Compliance Information Analysis. It appears there is an utility that puts all of the ACF2 info into a flat file which can then be loaded into DB2 tables that are predefined by ACF2.  There are 88 tables!

     

    I have just scratched the surface of this, but here are the questions I have so far:

    • What’s required to set up the utility in DB2?
    • Can the utility unload just the data needed for ACF2 audit reports?
    • Can we get by with loading a limited number of tables?
    • Are there predefined reports that can be used for ACF2 audit reports?

     

    The doc for CIA is in the ACF2 Auditing and Compliance manual.

    The job/ddl to implement the CIA feature is in the PDS called SYSI.CA.ACF2.R16SP00.CAX1JCL0 . CIA4LNK1 is used to link the DB2 modules.

    CIA4DB1 is used to create the tables.

     

    Thanks, Brett



  • 2.  Re: ACF2 CIA (Compliance Information Analysis)
    Best Answer

    Broadcom Employee
    Posted Sep 11, 2017 10:09 AM

    The following are your questions followed by answers regarding ACF2 CIA.

     

    •What’s required to set up the utility in DB2?

    There are six steps to setup the CIA Repository in DB2. These steps are described in section
    'Implement the CIA Repository in DB2' of the ACF2 documentation at the following link:
    https://docops.ca.com/ca-acf2-for-z-os/16-0/en/auditing-and-compliance/implement-compliance-information-analysis/implement-the-cia-repository-in-db2

    •Can the utility unload just the data needed for ACF2 audit reports?
    The CIAUNLD load jobs executes the ACFIAUNL program which allows for INCLUDE/EXCLUDE input
    statements that to allow for selection criteria for the objects unloaded from the ACF2 databases.
    Details can be found in the ACF2 Documentation in section 'Unload Utility Control Statements' at the following link:

    https://docops.ca.com/ca-acf2-for-z-os/16-0/en/auditing-and-compliance/implement-compliance-information-analysis/unload-the-security-information-for-ca-acf2/unload-utility-control-statements

    •Can we get by with loading a limited number of tables?
    Yes by only unloading specific data for the tables desired as described above.
    •Are there predefined reports that can be used for ACF2 audit reports?
    Yes, there are six predefined reports provided.

    Details on the predefined reports can be found in section 'CA ACF2 CIA Reports' of the ACF2 documentation at the following link:

    https://docops.ca.com/ca-acf2-for-z-os/16-0/en/auditing-and-compliance/implement-compliance-information-analysis/ca-acf2-cia-reports

     

    regards, 

    Michael Blaha

    ACF2 Technical Support



  • 3.  Re: ACF2 CIA (Compliance Information Analysis)

    Posted Sep 11, 2017 10:20 AM

    Thanks Michael for your quick response.

     

    Brett Hartmann

    Ph:847-553-3647