These are very unusual times. Everyone around the world has to change daily lives in ways that were inconceivable just a couple months ago. It can be very distracting. Stay focused. With all the personal and business changes many of us are being asked to work from home. This brings an entire new risk with employees accessing the internet outside of the security of the corporate firewalls. Clicking on a link that looks like a legitimate article on coronavirus may install a keystroke logger. This then opens the doors for obtaining user credentials and access by unauthorized personnel.
One way to offset these challenges is to establish effective processes and use the right tools to manage user administration, audit configurations and settings, monitoring and alerting of changes and events. With the changes, we are all being asked to address the security of our most valuable systems.
IBM Mainframe is considered the most secure enterprise platform in the world and the reality is, they are the most securable, but they are just as vulnerable as any other platform when critical vulnerabilities exist.
Good mainframe security is a triumvirate that includes processes, people, and technology.
Unfortunately, because the mainframe has such a bulletproof reputation, many customers are not leveraging the best processes available to them. According to the 2019 Verizon Data Breach Incident Report, human errors continue to be one of the top causes of data breaches.
To help our Z Security community, IBM EMEA has, in the last months of lock-down, hosted several Z Security webinars, related to data security, identity and access management, security information and event management, auditing & compliance, encryption and key management on z/OS and more.
We’ve tapped on our skilled mainframe security professionals and lab experts as presenters and they are happy to share.
Here’s a sampling of titles and this link will get you to all of them :
1) IBM Data Security for Mainframe Webinar (DB2,IMS and Dataset) 2 hours
2) IBM Multi Factor Authentication for Mainframe zOS Webinar
3) IBM Mainframe Security Compliance, Audit and Admin Webinar (including hacking demo)
4) Protecting Mainframe Data with Guardium
5) Encryption Key management for data at rest with SKLM
6) zSecure and SIEM integration webinar
7) IBM Security zSecure Alert Concepts & Infrastructure
8) IBM zSecure 2.4 Update
9) Quality Assurance for RACF Administration with IBM Security zSecure Command Verifier
10) Data Privacy Passport
If you have more questions, please address your requests to Francesca Ferretti, EMEA Geo, Mainframe Security Leader, Francesca.email@example.com. And in the meantime, living in this pandemic can be very distracting. Stay focused. Stay healthy.
PS: Who knows more about protecting Z than Z people? Join your Z Security Community now.