RACF

USERS

GROUP

KOIRUG

Kentucky-Ohio-Indiana RACF Users Group

 

 

Past Meeting Agendas

 

 

Thursday, November 10, 2022 - RUGONE + KOIRUG

   +CHIRUG + GARUG ** WebEx hosted by RSH Consulting **

 

Agenda: Reducing the Use of UID(0)
     Lennie Dymoke-Bardshaw, Reverse Sweep Consulting

RACF Update
     Mark Nelson, IBM

Pervasive Encryption Implementation - User Experience - Update
     Tracy Ison and Jim Kuntz, Ohio National

Taking the "Sword" out of "Password"
     Bruce Wells, IBM

SAFTRACE Demystified
     Mark Nelson, IBM

 

 

Thursday, May 26, 2022 - RUGONE + KOIRUG + CHIRUG

    + GARUG *** WebEx hosted by RSH Consulting ***

 

Agenda: Unix File System Security REXX EXECs Demo
     Bruce Wells, IBM

Crypto Lockdown
     Eysha Powers, IBM

Top Most Prevalent z/OS Security Vulnerabilities
     Brian Marshall, Vanguard Integrity Professionals

     Robert S. Hansel, RSH Consulting

PWDCOPY
     Robyn E. Gilchrist, RSH Consulting

RACF Administrator Toolkit
     Robert S. Hansel, RSH Consulting

 

 

Thursday, October 14, 2021 - RUGONE + KOIRUG + CHIRUG

    + GARUG *** WebEx hosted by RSH Consulting ***

 

Agenda: What's new in CICS Security
     Colin Penfold, IBM

Pervasive Encryption Implementation - User Experience
     Tracy Ison and Jim Kuntz, Ohio National

RACF and the Parallel Sysplex
     Mark Nelson, IBM

RACF, VSAM and the Path to an Encrypted RACF Database
     Mark Nelson, IBM

 

 

Thursday, May 27, 2021 - RUGONE + KOIRUG + CHIRUG

    + GARUG *** WebEx hosted by RSH Consulting ***

 

Agenda:

Unix File System Security
     Robert S. Hansel, RSH Consulting

RACF Update
     Ross Cooper, Wai Choi, Mark Nelson, IBM

MFA Implementation Project Update
     Steve Kiernan, State Street Bank

z/OS TCP/IP Intrusion Detection Services
     Chris Meyer and Joshua Bennetone, IBM

Password phrases & Mixed-Case Password Implementation
     Robert S. Hansel, RSH Consulting

 

 

Thursday, October 29, 2020 - RUGONE + KOIRUG + CHIRUG

      *** WebEx hosted by RSH Consulting ***

 

Agenda:

FTP logon Using Passphrases and Digital Certificates
     Robyn E. Gilchrist, RSH Consulting

ACEE Privilege Escalation Prevention
     Joel Tilton

Converting RACF Dataset Name and Range Table to Parmlib
     Adam Klinger, Wells Fargo

RACF Surveys
     Robert S. Hansel, RSH Consulting

 

 

Tuesday, May 12, 2020 - RUGONE + KOIRUG + CHIRUG

      *** WebEx hosted by RSH Consulting ***

 

Agenda:

Using the Tivoli Directory Server for z/OS (LDAP) to Manage Password Synchronization
     Sandra E. Carroll, Navy Federal

RACF Class Descriptor Table
     Robert S. Hansel, RSH Consulting

IBM Z Pervasive Encryption Overview with Dataset Encryption and zERT Demo
     Jimmy Ference, Sirius Computer Solutions

The Joy of JOINKEYS
     Mark Nelson, IBM

 

 

Thursday, May 9, 2019  ***  Sponsored by SSH and SDS

 

Agenda:

Certificate 101

     Sandra E. Carroll, Nationwide

Securing your FTP Transmissions on z/OS

     Colin van der Ross, SDS

RACF Healthchecks

     Robert S. Hansel, RSH Consulting

High Expectations: Our Systems are (or could be) Like Airplanes

     Mark Nelson, IBM

What’s New in RACF in z/OS V2R4?

     Mark Nelson, IBM

 

 

Thursday, October 18, 2018 * Sponsored by RSH Consulting

 

Agenda:

Vulnerability Management for the Mainframe

     Sandra E. Carroll, Nationwide

RACF SETROPTS

     Robert S. Hansel, RSH Consulting

RACF Class Descriptor Table

     Robert S. Hansel, RSH Consulting

Examining a Mainframe Internet Hack

     Robyn E. Gilchrist, RSH Consulting

 

 

Thursday, May 10, 2018           *** Sponsored by ASPG ***

 

Agenda:

A Peek Inside the RACF Database

     Mark Nelson, IBM

A Fresh Look at Erase-on-Scratch

     Mark Nelson, IBM

RACF Monitoring & Reporting

     Robert S. Hansel, RSH Consulting

Network Security and SERVAUTH

     Peter Roberts, Vanguard Integrity Professionals

Roundtable Discussion: User Experiences with SIEMs

 

 

Thursday, November 2, 2017   ** Sponsored by Vanguard **

 

Agenda:

Common Vulnerabilities in RACF Audits

     Julie Bergh, IBM

ICSF Basics

     Dustin Hayes, Vanguard Integrity Professionals

Roundtable Discussion: Who is a "Privileged" User?

RACF Update & Pervasive Encryption

     Julie Bergh, IBM

 

 

Tuesday, May 2, 2017   ** Sponsored by Key Resources **

 

Agenda:

PROGRAM Control

     Bruce Wells, IBM

Closing the Integrity Gap for the Mainframe

     Ray Overby, Key Resources

z/OSMF

     Julie Bergh, IBM

UNIXPRIV Class

     Robert S. Hansel, RSH Consulting

 

 

Thursday, November 10, 2016     *** Sponsored by IBM ***

 

Agenda:

A View from RACF Level 2

     John Reale, III, IBM

Help Prevent Possible Breaches: Stronger User Authentication and New Encryption Policy Support

     Julie Bergh, IBM

Sponsor: RACF is 40 years old but have your security practices stood the test of time?

     Julie Bergh, IBM

40 year History of RACF

     Julie Bergh, IBM

 

Tuesday, April 26, 2016 ** Sponsored by Type80 and SDS **

Agenda:

z/OS UNIX System Services Security 50.5 (Only half as introductory as UNIX Security 101!)

     Bruce Wells, IBM

RACF Utilities

     Robert S. Hansel, RSH Consulting

Digital Certificates

     Dustin Hayes, Vanguard Integrity Professionals

 

Thursday, November 5, 2015 * Sponsored by CA Technologies

Agenda:

My Adventures with TCP/IP Port Security and RACF on z/OS

     Joel Tilton, DTCC

RACF Administrative Authorities

     Robert S. Hansel, RSH Consulting

RACF Update

     Bruce Wells, IBM

Introduction to The Risk Adaptive Security Model

     Al Ganley, CA Technologies

 

Tuesday, June 2, 2015            *** Sponsored by CorreLog ***

Agenda:

Auditing CICS Security for Best Practices

     Phil Emrich, Vanguard Integrity Professionals

Taking the "Sword" out of "Password"

     Bruce Wells, IBM

Sponsor: Bridge the Gap: How to Use a Product You Already Own to Enhance z/OS Security

     George Faucher, CorreLog

 

Tuesday, November 4, 2014     *** Sponsored by NewEra ***

Agenda:

Weak z/OS & RACF Configuration can Compromise your Mainframe

     Doug Behrends, Vanguard Integrity Professionals

DSMON

     Todd Grant, Navient

 

Thursday, May 29, 2014               *** Sponsored by ASPG *** 

Agenda:

RACF & Storage Administration

     Robert S. Hansel, RSH Consulting, Inc.

Introduction to RACROUTE

     Mark Nelson, IBM

RACF Requirements

     Mark Nelson, IBM

RACF Update

     Mark Nelson, IBM

Understanding z/OS Cryptography

     Greg Thomason, ASPG

 

Tuesday, October 8, 2013  ** Sponsored by RSH Consulting **

Agenda:

DB2 Security for RACF Administrators

     Phil Emrich, Vanguard Integrity Professionals

Converting DB2 Object Security to RACF - A User Experience

     John Trimble, Sallie Mae

RACFVARS

     Robert S. Hansel, RSH Consulting, Inc.

TSO & RACF

     Robert S. Hansel, RSH Consulting, Inc.

Sponsor Presentation

     Robert S. Hansel, RSH Consulting, Inc.

 

Thursday, May 2, 2013                     *** Sponsored by SSH ***

Agenda:

A View from RACF Level 2

     John Reale, III, IBM

SETROPTS

     Robert S. Hansel, RSH Consulting, Inc.

Roundtable Discussion: Responding to Audits

     Moderator: Todd Grant, Sallie Mae

The APPL Class

     Robert S. Hansel, RSH Consulting, Inc.

z/OS Security outside of SAF and RACF

     Dave Rivard, SSH Communication Security

 

 

Wednesday, October 24, 2012       ** Sponsored by Voltage **

Agenda:

Protecting JES Resources with RACF

     Peter Roberts, Vanguard Integrity Professionals

Protecting SDSF Resources using RACF

     Peter Roberts, Vanguard Integrity Professionals

Enterprise Encryption 101

     Phil Smith III, Voltage Security, Inc.

The Payments Ecosystem: Security Challenges in the 21st Century

     Phil Smith III, Voltage Security, Inc.

 

Thursday, June 7, 2012             *** Sponsored by Xbridge ***

Agenda:

Common Holes in RACF Defenses

     Robert S. Hansel, RSH Consulting, Inc.

RACF Monitoring and Reporting

     Robert S. Hansel, RSH Consulting, Inc.

Replacing BPX.DEFAULT.USER

     Robert S. Hansel, RSH Consulting, Inc.

What Are You Going To Do With All That Sensitive Data?

     Barry Schrager, Xbridge Systems

 

Tuesday, November 1, 2011          *** Sponsored by ASPG ***

Agenda:

Websphere MQ Security

     Tom Schneider, IBM

UNIXPRIV Class

     Robert S. Hansel, RSH Consulting, Inc.

How Grouping and Member Profiles are Merged during RACLIST

     Robert S. Hansel, RSH Consulting, Inc.

Understanding Cryptography

     Greg Thomason, ASPG

 

Thursday, May 5, 2011          ***  Sponsored by Vanguard  ***

Agenda:

DISA-STIGs: What They Are and Why You Should Care

     Brian Marshall, Vanguard Integrity Professionals

Address Security Vulnerabilities for USS

     Brian Marshall, Vanguard Integrity Professionals

RACF Performance Tuning

     Robert S. Hansel, RSH Consulting, Inc.

IRRHFSU - HFS Unload Utility

     Robert S. Hansel, RSH Consulting, Inc.

 

Thursday, October 21, 2010  * Sponsored by Key Resources * 

Agenda:

Is your z/OS System Secure?

     Ray Overby, Key Resources, Inc.

Payment Card Industry (PCI) Readiness Reviews

     Jim Yurek, Vanguard Integrity Professionals

RACF Update

     IBM RACF Development Team

DBSHIELD z/OS R10

     Ira Ringel, IBM RACF Development Team

 

Tuesday, June 8, 2010                *** Sponsored by Type80 ***

Agenda:

Lightweight Directory Access Protocol (LDAP)

     Saheem Granados, IBM

RACF Command Tips

     Robert S. Hansel, RSH Consulting

RACF Authorization Logic

     Robert S. Hansel, RSH Consulting

 

Thursday, October 29, 2009            *** Sponsored by IBM ***

Agenda:

RACLIST 101 (aka RACLIST Bootcamp)

     Russ Hardgrove, IBM

FACILITY Class

     Robert S. Hansel, RSH Consulting

RACF Custom Fields

     Laurie Ward, IBM

 

 

Thursday, May 7, 2009                      *** Sponsored by EKC ***

Agenda:

Common Security exposures in TCPIP communication Setup

     John Connors, Vanguard Integrity Professionals

Common Security exposures in the z/OS USS environment

     John Connors, Vanguard Integrity Professionals

Circumventing RACF Protection

     Robert S. Hansel, RSH Consulting

 

 

Thursday, November 6, 2008* Sponsored by RSH Consulting *

 

Agenda: RACF Update

     Mark Nelson, IBM

Implementing the RACF/DB2 Interface

     Bill Bowles & Kevin Arnold, OPERS

 

 

Thursday, May 8, 2008                *** Sponsored by Infosec ***

 

Agenda: WebSphere Application Server Security

     Mike Kearney, IBM

Roundtable Discussions

     Barb Rhoads & Bill Bowles, Moderators

CICS Command Security

     Doc Farmer, Infosec

 

 

Tuesday, October 30, 2007    *** Sponsored by Vanguard ***

 

Agenda: Unix File System Security

     Robert S. Hansel, RSH Consulting

RACF, TCP/IP, and The SERVAUTH Class

     Jim McNeill, Vanguard Integrity Professionals

 

 

Thursday, May 31, 2007              *** Sponsored by ASPG ***

 

Agenda: General Resource Fundamentals

     Robert S. Hansel, RSH Consulting

DFSORT & ICETOOL

     Robert S. Hansel, RSH Consulting

Understanding Cryptography

     Greg Thomason, ASPG, Inc.

 

 

Thursday, October 12, 2006             *** Sponsored by CA ***

 

Agenda: RACF  and z/OS UNIX: Integrated More Than You May Know

     Bruce Wells, IBM

RACF & REXX

     Robert S. Hansel, RSH Consulting

Digital Certificates 101

     Bob Kleamovich, CA

RACF & Storage Administration

     Robert S. Hansel, RSH Consulting

 

 

Thursday, June 8, 2006       ** Sponsored by Beta Systems **

 

Agenda: RACF Update

     IBM

Identity Management and Security Provisioning (in Mainframe & Mixed Environments)

     Frank Pasko, Beta Systems

Roundtable: Using HR Data to Administer RACF

     Moderator: Barb Rhoads, Cincinnati Financial

RACF & CICS

     Robert S. Hansel, RSH Consulting

 

 

Thursday, October 13, 2005     ** Sponsored by Vanguard **

 

Agenda: RACF Administrative Authorities

     Robert S. Hansel, RSH Consulting

SSL & Digital Certificates

     Jim NcNeill, Vanguard

Roundtable - Emergency Access for Application Developers

     Moderator - Barb Rhoads, Cincinnati Financial

RACF & JES

     Jim NcNeill, Vanguard

 

 

Tuesday, June 14, 2005           *** Sponsored by CONSUL ***

 

Agenda: FACILITY Class

     Mark Hahn, RSH Consulting

RACF Utilities

     Mark Hahn, RSH Consulting

Top 10 MVS and RACF Issues to Audit

     Randy Young,  Consul Risk Management

The Things We Do for Compliance

     Randy Young,  Consul Risk Management

 

 

Thursday, October 14, 2004        *** Sponsored by MASE ***

 

Agenda: RACF Performance Tuning

     Robert S. Hansel, RSH Consulting

RACF Monitoring and Reporting

     Robert S. Hansel, RSH Consulting

Implementing RACF Policy Enforcement: Users Experience

     Simon Dodge, SiCon inc.

Cleaning Up Inactive RACF Userids: A User Experience

     Simon Dodge, SiCon inc.

 

 

Thursday, May 6, 2004          *** Sponsored by Vanguard ***

 

Agenda: RACF & Unix Systems Services

     Robert S. Hansel, RSH Consulting

Using the RACF Data Security Monitor

     Jim McNeill, Vanguard Integrity Professionals

DB2 Security for RACF Administrators

     Jim McNeill, Vanguard Integrity Professionals

 

 

Thursday, October 23, 2003 * Sponsored by RSH Consulting *

 

Agenda: RACF Update

     Mark Nelson, IBM

RACF SETROPTS

     Robert S. Hansel, RSH Consulting

RACF Command Tips

     Robert S. Hansel, RSH Consulting

Common Holes in RACF Defenses

     Robert S. Hansel, RSH Consulting

 

 

RACF is a trademark of International Business Machines Corporation.

Webpage provided courtesy of RSH Consulting, Inc.