Is Compliance Event Manager a replacement for product TYPE80?

Products

• Compliance Event Manager

Issue/Introduction

Can CEM process the same SMF data as product TYPE80? 

Environment

z/os

Resolution

CEM is not a complete replacement for the product TYPE80 at this time.
CEM is not a simple SMF forwarder though SMF data can be filtered and/or altered via exits.
CEM gets the data it processes directly from the External Security Manager (ESM), which provides CEM with more data than SMF carries.

Currently there is support for these SMF events only:
USS - SMF 92, subtype 1, 5, 6, 7, 10, 11
TCP - SMF 119, subtype 11