Checklist Summary:

This SRR Review Procedures, OS/390 Top Secret document provides the procedures for conducting a Security Readiness Review (SRR) to determine compliance with the requirements in the OS/390 Security Technical Implementation Guides (STIG). This SRR guide focuses strictly on the IBM OS/390 operating system (OS) and how the Top Secret security component interacts with the operating system. Additionally, this checklist ensures the site has properly installed and implemented the Top Secret component for the IBM OS/390 OS and that it is being managed in a way that is secure, efficient, and effective, through procedures outlined in the checklist. The items reviewed are based on standards and requirements published by DISA in the OS/390 Security Technical Implementation Guide.

Checklist Role:

• Mainframe Operating System

Known Issues:

Not provided.

Target Audience:

Developed for the DOD. This checklist has been created for IT professionals, particularly Information Assurance Managers (IAM), Information Assurance Officers (IAO), System Administrators (SAs) and and systems programming personnel in support of protecting z/OS operating systems, ACPs, and IA-enabled products in the following sites: Systems Management Centers (SMCs), Computing Services Processing Element (CSPE), Systems Support Offices (SSOs), DoD Components, and Other DoD customers.

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

DoD Instruction (DoDI) 8500.01

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

Not provided.

Product Support:

It should be noted that FSO Support for the STIGs, Checklists, and Tools is only available to DOD Customers.

Point of Contact:

[email protected]

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 01/23/2026