Presentation
BYOD Lab: Enforcing a Zero Trust Security Strategy in CICS Using Security Discovery
Contributors
Event Type
Technical Session
CICS
All Audiences
Modernize Data Management and Analytics
TimeWednesday, August 199:15am - 10:15am EDT
LocationSTE Lab
DescriptionAdopting a Zero Trust security strategy for CICS workloads requires organizations to move beyond traditional transaction‑level controls and toward a model centered on continuous verification and least‑privileged access. The CICS Security Discovery capability provides a structured, low‑risk path to support this transition by analyzing existing RACF or other enterprise security manager (ESM) definitions and generating Security Discovery Data (SDD) that reveals actual resource usage and access patterns in production environments.
The CICS Security Discovery Lab equips participants with hands‑on experience and practical skills to accelerate their Zero Trust journey. Through guided exercises, participants will:
Extract relevant security metadata from RACF.
Collect Security Discovery Data (SDD) from active CICS regions.
Import both metadata and SDD into the CICS Explorer.
Use the CICS Security Discovery perspective to analyze real‑world access behaviors and translate these insights into refined, role‑based resource and command security definitions.
By the end of the lab, participants will be able to interpret actual access requirements, reduce the complexity associated with security modernization, and design CICS security configurations aligned with IBM’s recommended Zero Trust practices. This enables organizations to strengthen the protection of their CICS workloads while simplifying the migration from legacy security models to a more rigorous and adaptive security posture.
The CICS Security Discovery Lab equips participants with hands‑on experience and practical skills to accelerate their Zero Trust journey. Through guided exercises, participants will:
Extract relevant security metadata from RACF.
Collect Security Discovery Data (SDD) from active CICS regions.
Import both metadata and SDD into the CICS Explorer.
Use the CICS Security Discovery perspective to analyze real‑world access behaviors and translate these insights into refined, role‑based resource and command security definitions.
By the end of the lab, participants will be able to interpret actual access requirements, reduce the complexity associated with security modernization, and design CICS security configurations aligned with IBM’s recommended Zero Trust practices. This enables organizations to strengthen the protection of their CICS workloads while simplifying the migration from legacy security models to a more rigorous and adaptive security posture.
Contributors
Client Technical Specialist - CICS Integration & Security - IBM Z Worldwide Systems Center
CICS Advisory Specialist - Worldwide Systems Center