Running Caldera Bank's mainframe and midrange security program: the estate that carries the core ledger and card authorization — z/OS with RACF, CICS, DB2 and IMS, thousands of batch jobs and the IBM i midrange — rebuilt from three conflicting spreadsheets into one inventory with PCI and SOX scope mapped; the eight-station mainframe rail from estate, ESM and access, privileged users, dataset protection, network and encryption, batch and jobs, logging to modernization and skills; and four exposures closed on the way: open generic profiles set to UACC=NONE with PROTECTALL and MFA, cleartext TN3270 logons wrapped in AT-TLS, plaintext passwords removed from JCL, and SMF records sent to the SIEM in minutes instead of read by hand weeks later.

CY-SENIOR-080Senior Level · Mainframe Security Program

Mainframe & Midrange Security Program — The Mainframe Rail

A senior-level program course that runs the security program for a bank's mainframe and midrange estate. Work the mainframe rail - eight stations: Estate & Risk Picture, ESM & Access Control, Privileged Users & SoD, Dataset & Resource Protection, Network & Encryption, Batch, Jobs & Integrations, Logging & Monitoring, and Modernization & Skills - governing RACF/ACF2/Top Secret, privileged access, datasets and CICS/DB2/IMS resources, encryption, batch and integrations, audit evidence, and secure modernization, with real RACF/TSO commands, SMF queries, and z/OS Connect policy. Four hands-on activities in every lesson.

16 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Build and prioritize a current, platform-derived estate inventory and risk picture.
Govern every ESM in the estate under default-deny access and strong authentication.
Scope privileged attributes, control APF libraries, time-box firecall access, and segregate duties.
Protect datasets, started tasks, CICS transactions, and DB2/IMS resources at least privilege.

Price:৳10,000