zSecure CICS Toolkit provides an API for COBOL(and other) programs running in CICS, to access RACF profile information and to modify (many but not all) profile fields. The API uses a control block to retrieve the (old) profile field values, and to specify the (new) field values, so the (COBOL) program does not have to build a RACF command, and to save on command parsing + syntax verification.
As long as your COBOL application does not intend to execute RACF commands, but instead updates RACF profile fields via the CICS Toolkit API, you're good.
------------------------------
Rob van Hoboken
------------------------------