Handling comprimised or hacked acids

Products

• Top Secret

Issue/Introduction

Suggestions for handling user ids that have been compromised or hacked.

 

Environment

Release : 16.0

Resolution

If an acid is compromised or hacked, the following actions are recommended:

• Suspend the acid
  TSS ADD(acid) SUSPEND
• Reset the password and expire it
  TSS REP(acid) PASS(newpass,,EXP)
• Create a special department acid called 'JAIL' or name of your choosing. Move compromised acids to that department. 
  TSS MOVE(acid) DEPT(JAIL)
• Authorize/create special Top Secret admins to have scope of the JAIL department.