CA Cleanup for z/OS (CA Cleanup) reduces the effort and pressure associated with maintaining current regulatory, statutory and audit requirements. It does this by removing obsolete, unused, redundant and excessive access rights through easily automated, virtually unattended and continuous cleanup of mainframe security databases CA ACF2TM, CA Top Secret and IBM RACF.
CA Cleanup offers the following features:
Security Policy Management: The software allows administrators to define and manage security policies for mainframe resources. This includes setting rules for user access and password requirements, and defining group-based access controls.
Access Control: CA Cleanup for z/OS enables granular control over who can access specific mainframe resources. It supports various access control methods, including resource-level security, program authorization, and transaction authorization.
User Authentication: The software provides robust user authentication mechanisms, such as password-based authentication, RACF pass tickets, digital certificates, and more. It ensures that only authenticated users can access the mainframe system.
User Provisioning and De-Provisioning: It facilitates the creation and removal of user accounts on the mainframe. Administrators can easily manage user profiles, assign appropriate access privileges, and revoke access when needed.
Auditing and Reporting: CA Cleanup for z/OS offers extensive auditing capabilities to monitor user activities and track changes made to security settings. It generates comprehensive reports for compliance purposes, including user access reports, audit trail reports, and security violation reports.
Resource Monitoring and Protection: The software continuously monitors mainframe resources for unauthorized access attempts, suspicious activities, or security breaches. It provides real-time alerts and takes proactive measures to prevent unauthorized access.
Integration with Mainframe Security Systems: CA Cleanup for z/OS integrates with existing mainframe security systems like IBM RACF (Resource Access Control Facility) to leverage their features and enhance overall security management.
Compliance Management: The solution helps organizations meet regulatory compliance requirements, such as PCI DSS, HIPAA, and GDPR. It provides tools and reports to demonstrate compliance and supports security audits.
Customization and Automation: Administrators can customize security policies and settings according to their organization's requirements. The software also supports automation through scripting and APIs for streamlined management.
Centralized Management: CA Cleanup for z/OS offers a centralized management console or interface for efficient administration of security policies and controls across the mainframe environment.
Using CA Cleanup has the following benefits:
Enhanced mainframe security
Control over user access to resources
Protection against unauthorized access
Auditing and tracking of user activities
Compliance with regulatory requirements
Streamlined user provisioning and de-provisioning
Real-time alerts for security incidents
Integration with existing mainframe security systems
Customization to meet organizational needs
Centralized management of security policies
Cleanup was previously known as CA Cleanup.
Standard Bank of South Africa
It attempts to record the usage of profiles and resources attached to a particular user. The idea is that it looks forward in the database, so if it’s not showing any activity, you can get rid of that profile.
It presents problems. The problem is, if I give someone access to it, I can’t control the scope of what they can see. They can see everything. I want to make the information available and more integrated with other security components, and I want it to be more reliable.
It also needs acknowledgement that clean-up data can come from temporary cloned environments that somehow need to be incorporated into enterprise view of usage.
The stability is fine. We’ve worked through quite a few bugs over the past five to six years. Sometimes it took some time to fix, but we passed all that. They came out with an enhancement, we installed it, and found that it couldn’t do everything we wanted.
There have been no problems with scaling it.
Technical support is good, and they're great once they agree there’s a problem.
I wasn't involved in the initial setup as others in my group handled that.
Use it as an indication of data, not as gospel. Don’t take action based solely on it. We don’t rely on it as gospel.
