Top Secret Replay-Resistant

Products

• Top Secret

Issue/Introduction

Is Top Secret is replay-resistant? The information system uses [Assignment: organization-defined replay-resistant authentication mechanisms] for network access to privileged accounts.

Resolution

Top Secret provides support for passtickets which are used for one time use. In addition, Top Secret also provides complete audit capability for both privileged and non-privileged accounts. These audit trails, in unison with the front end access point applications, provide the basis for replay-resistant support.

In addition to Top Secret, Broadcom also offers the Compliance Event Manager for z/OS product. This product further expands monitoring of privileged account usage. This includes automated notifications whenever an access policy has been tripped.