zSecure Audit

The architecture of zSecure Audit is centered around several key components designed to collect, analyze, and report on security-related data within a z/OS environment. The primary components include the CKFREEZE utility, the C2R reporting engine, and various configuration datasets. The CKFREEZE utility is responsible for collecting security data from the z/OS system.

It gathers information about user profiles, resource definitions, and system settings. The C2R reporting engine processes the data collected by CKFREEZE and generates reports based on predefined criteria and user-defined configurations. Communication between components occurs primarily through batch jobs and system datasets.

CKFREEZE writes data to datasets, which are then read by C2R for report generation. Data is stored in datasets, including VSAM and sequential datasets. These datasets store security snapshots, configuration data, and report output.

Network requirements are minimal, as the product operates within the z/OS environment. The main administrative interface is through JCL and system commands. User management is handled through the z/OS security system (RACF, CA Top Secret, or CA ACF2).

Configuration parameters are managed through JCL and configuration datasets. Monitoring and logging capabilities are provided through system logs and audit trails, enabling administrators to track security-related events and system activities.