Vanguard Security 2010 Track Information
![]() |
RACF® Advanced Administration
This track provides training for Security Administrators with a working knowledge of RACF. Topics are presented on z/OS® functions and interfaces with components such as CICS®, z/OS UNIX®, LDAP, RRSF, TCP/IP, and MQ Series. Other sessions enable Security Administrators to understand DSMON, JES Security, SDSF Security, and make the best use of RACF.
RACF & z/OS UNIX® System Services, Part 1 and 2
John Connors, Vanguard Integrity Professionals
How to use RACF user and group profiles to define UNIX UIDs and GIDs for various users (such as people, daemons, and servers); and how to use RACF to secure authority.
Protecting JES Resources with RACF
Art Hatfield-Mihelic, Vanguard Integrity Professionals
Audit points on every self-governance and regulatory compliance audit (e.g., who can submit jobs, view and control production sensitive and critical job output in production z/OS environments, and routing of job output).
Protecting SDSF Resources with RACF
Art Hatfield-Mihelic, Vanguard Integrity Professionals
SDSF (Spool Display and Search Facility) for JES2 has been around for decades. Internal SDSF security for access to JES2 resources through SDSF is provided through a set of parameters called the ISFPARMS.
Using RACF DSMON Workshop
Art Hatfield-Mihelic, Vanguard Integrity Professionals
DSMON generates up to 11 reports pertaining to z/OS integrity and critical aspects of your RACF implementation. Learn how to create some or all of them and interpret the data. Bring a copy of the output from the DSMON utility executed in your own environment to learn more from the session.
Breaking into z/OS via TCP/IP and the Internet
Stu Henderson, The Henderson Group and Jan Quach, KPMG
Techniques to attack mainframes connected to the Internet, with security that relies on integration of USS, TCP/IP, WebSphere®, and other daemon security, plus MVS security and software such as RACF, ACF2TM, or Top Secret® through use of tools IBM provides.
Security for WebSphere MQ on z/OS Using RACF
Phil Emrich, Vanguard Integrity Professionals
Specific controls for WebSphere MQ on z/OS and their implementation using RACF as the security manager for z/OS.
Communications Server Security Overview
Thomas Cosenza, CISSP, IBM
Abstract Pending
Introduction to IBM Health Checker for z/OS and the RACF Health Checks
Mark Nelson, CISSP, CSSLPTM, IBM
This session explores How the IBM Health Checker for z/OS and the RACF checks in particular, can help you discover confidentiality and integrity issues before they become problems.
CICS Security: RACF Transaction Authorization
Phil Emrich, Vanguard Integrity Professionals
Review CICS processing and the RACF processing in response to the CALL to RACF from CICS. The use of member and group class profiles to protect CICS transactions, and guidelines and recommendations.
CICS Security: RACF Authorization for CICS Resources
Phil Emrich, Vanguard Integrity Professionals
How CICS resource security can be applied to both CICS defined resource types and installation or application defined resources. CICS connection methodologies that rely on resource security, rather than transaction security to protect application functions.
TLS on z/OS Communication Server
Thomas Cosenza, CISSP, IBM
Abstract Pending
An Introduction to LDAP on System z
John Connors, Vanguard Integrity Professionals
Overview of LDAP and how it can be used for security.







