IBM zSecure portfolio solution packages
IBM zSecure helps protect your mainframe. It provides cost-effective security administration, improves service by detecting threats, and reduces risk with automated audit and compliance reporting.
Besides the separate product offerings, there are solution packages available for ordering that combine the functionality of several components.
IBM Security zSecure Administration (5655-ABH) contains :
IBM Security zSecure Admin (5655-ABB)
IBM Security zSecure Visual (5655-ABF)
Edit: This package only exists at the 3.1 level.
IBM zSecure Compliance and Auditing (5655-ABI) contains:
IBM zSecure Audit (5655-ABC)
IBM zSecure Alert (5655-ABG)
IBM zSecure Command Verifier (5655-ABE)
IBM zSecure Compliance and Administration (5655-ABJ) contains:
IBM zSecure Admin (5655-ABB)
IBM Security zSecure Visual (5655-ABF) - Edit: this is only a part at the 3.1 release level
IBM zSecure Audit (5655-ABC)
IBM zSecure Alert (5655-ABG)
IBM zSecure Command Verifier (5655-ABE)
Edit: There is now also a product IBM Z Security and Compliance Center (5655-CC1), which is not a part of the zSecure portfolio, but which provides a super-set of the functionality of zSecure Audit. There are furthermore solution packages IBM Z Compliance and Auditing (5655-ABK) and IBM Z Compliance, Auditing and Administration (5655-ABL), which mirror the last two solution packages above but with that product instead of zSecure Audit. See this announcement.
The new IBM zSecure Compliance (5655-MCC) product is a super-set of the functionality of Z Security and Compliance Center. It is not currently associated with any solution packages.
IBM zSecure portfolio structure
The solution packages cover all the components that are installed directly onto z/OS.
The simple pictorial view of the overall zSecure suite structure is the following:
zSecure for z/OS consists of
installed directly onto z/OS:
5655-ABJ IBM zSecure Compliance and Administration, which consists of
5655-ABH IBM Security zSecure Administration (the last release was 3.1), which consists of
a subset of the zSecure Audit functionality is contained in 5655-ABA IBM zSecure Adapters for SIEM
5655-MCC IBM zSecure Compliance
a super-set of zSecure Audit functionality
The bold product identifier numbers (PIDs) designate individual product offerings. The solutions each consist of a number of these.
IBM zSecure portfolio integration
Regardless of how you order them, the products that are part of 5655-ABJ are strongly integrated, also with 5655-MCC.
For example, zSecure Admin, zSecure Audit, zSecure Alert, and zSecure Compliance share one ISPF user interface.
When starting that UI, it will indicate what functions are available by referring to the appropriate bold PIDs.
The solution PIDs are used for ordering, but are not referenced by the software or the individual product books.
The solutions do come with their own Program Directories for ease of installation.
The solution packages originally became available on June 1, 2012. You can read the US announcement letter
here.
Note on sub-capacity pricing
When sub-capacity pricing applies, most of the zSecure products that run on z/OS are subject to z/OS-based sub-capacity charges. There are two exceptions: IBM zSecure CICS Toolkit and IBM zSecure Alert have Execution-based sub-capacity charges.
Note: If IBM zSecure Alert (5655-ABG) is ordered as a separate product, then sub-capacity charges are Execution-based. If IBM zSecure Alert is ordered as one of the components of the IBM zSecure Compliance and Auditing (5655-ABI), IBM zSecure Compliance and Administration (5655-ABJ), IBM Z Compliance and Auditing (5655-ABK), or IBM Z Compliance, Administration and Auditing (5655-ABL) solutions, then it will have z/OS-based sub-capacity charges.
Edit: Changed the z/VM PID from 5655-T13 (V1) to 5655-RAC (V2)
Edit: Changed all z/OS PIDs from V2 to V3. The V2 PIDs were:
zSecure for z/OS consists of
installed directly onto z/OS:
5655-N25 IBM Security zSecure Compliance and Administration, which consists of
5655-N23 IBM Security zSecure Administration, which consists of
a subset of the zSecure Audit functionality is contained in 5655-AD8 IBM Security zSecure Adapters for SIEM