Vanguard Configuration Manager

Vanguard Configuration Manager is designed with a three-tier architecture comprising the Audit Engine, Reporting Module, and RACF Data Collector. The RACF Data Collector extracts security data from the z/OS RACF database. This data is then fed to the Audit Engine, which performs security assessments based on predefined rules and compliance standards such as the US National Checklist Program (NCP) and DISA Security Technical Implementation Guidelines (STIG).

The Audit Engine communicates with the Reporting Module to generate detailed reports on security findings. The tool supports Role-Based Access Control (RBAC) for managing user permissions. Configuration parameters are defined in configuration files, allowing administrators to customize the security assessments.

The tool uses encryption to protect sensitive data both in transit and at rest. Communication between components is facilitated through internal APIs. The command-line interface (CLI) provides administrative access for configuration and management.

Competing products like IBM Security zSecure offer similar functionality, but Vanguard Configuration Manager distinguishes itself with its streamlined architecture and ease of integration.