
BP-OPSYS-FILELOC-02 DDSCHEMA must reside in
$SYSTEM.SYSTEM.
If available, use Safeguard software or a third party object security product to grant
access to DDL object files only to users who require access in order to perform their
jobs.
BP-SAFE-DDL-01 Add a Safeguard Protection Record to grant appropriate
access to the DDL object file.
Discovery Questions Look here:
OPSYS-OWNER-02 Who owns the DDL object file? Fileinfo
OPSYS-OWNER-02 Who owns the DDQUERYS file? Fileinfo
OPSYS-OWNER-02 Who owns the DDSCHEMA file? Fileinfo
FILE-POLICY Who is allowed to execute DDL on the
system?
Policy
FILE-DDL-01
SAFE-DDL-01
Is the DDL object file correctly secured with
the ...