A tailored course, built for your situation
Mastering SOC 2 for z/OS System Programming Teams
Deep technical control mapping for core IBM mainframe environments
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Control implementation still routed through junior compliance analysts?
The situation this course is for
SOC 2 control deployment often fails when platform-specific decisions are deferred to non-specialists. Mainframe environments require precision that generalist teams can’t deliver.
Who this is for
Senior z/OS system programmer at a global systems integrator, responsible for audit-ready configurations in high-compliance environments.
Who this is not for
Entry-level auditors, non-technical compliance coordinators, or consultants without mainframe access.
What you walk away with
- Define and document control configurations in RACF, IPCS, and SMF independently
- Own the definition of security event thresholds without escalation
- Approve log retention policies tailored to z/OS operational rhythms
- Classify and manage privileged access in ACF2 environments without compliance team sign-off
- Deliver audit-ready control evidence directly from system logs
The 12 modules (with all 144 chapters)
Module 1. SOC 2 Trust Principles in z/OS Context
Map security, availability, and confidentiality criteria to mainframe subsystems and operational realities.
12 chapters in this module
- Understanding SOC 2 Type I vs Type II in audit cycles
- Control objectives for encrypted data at rest on DASD
- Aligning RACF profiles with access requirement clauses
- SMF record types relevant to monitoring controls
- z/OS security tokens and session validation rules
- Mainframe-specific risk scenarios under SOC 2
- Control overlap with ISO 27001 in client environments
- Documenting control boundaries in mixed-platform estates
- Mapping control ownership to RACF admin roles
- Time-stamping compliance events in UTC on z/OS
- Audit trail completeness requirements for change logs
- Version control for PARMLIB and SYS1.PROCLIB
Module 2. Control Mapping in RACF Environments
Translate SOC 2 requirements into precise RACF rule sets, profiles, and monitoring protocols.
12 chapters in this module
- RACF resource classes covered under SOC 2
- Defining access levels for GEN resource types
- Implementing rule-based access for CICS regions
- Automating group membership reviews
- Configuring secondary password checking
- Managing digital certificates in ICSF
- Enforcing MFA for z/OSMF access
- Controlled access to DB2 subsystems via RACF
- Privileged ID segmentation for sysprogs
- RACF reporting for compliance evidence
- Integrating RACF alerts with SIEM tools
- Retention settings for SECURITY and ACCESS logs
Module 3. SMF Data for Compliance Evidence
Turn system management data into auditable control outputs with minimal overhead.
12 chapters in this module
- Selecting SMF types for SOC 2 reporting
- Configuring Type 80 for TCP/IP access logs
- Parsing Type 30 for job initiation tracking
- SMF 42 and 89 records for security events
- Automated extraction of failed login attempts
- Correlating SMF data with user IDs
- Filtering noise in SMF records for audits
- Time-synchronized logging across LPARs
- Storing SMF data to meet retention policies
- Exporting SMF to external compliance tools
- Validating SMF integrity with checksums
- Documenting SMF configuration as control
Module 4. Access Control Implementation
Own the full lifecycle of access decisions on z/OS without deferral.
12 chapters in this module
- User provisioning workflows under SOC 2
- Segregation of duties in mainframe environments
- Approving access to production datasets
- Temporary access with automatic expiry
- Reviewing access entitlements quarterly
- Detecting dormant accounts in RACF
- Handling emergency IDs under audit rules
- Logging access changes in SYSLOG
- Validating role-based access in practice
- Automating access certification reports
- Handling access revocation upon role change
- Documenting access decisions for auditors
Module 5. Change Management Integration
Embed compliance into standard change workflows without slowing delivery.
12 chapters in this module
- Defining change types under SOC 2 scope
- Routing emergency changes with audit trail
- Approving changes to security parameters
- Maintaining CMDB accuracy for z/OS assets
- Linking change tickets to control updates
- Reviewing change success with SMF data
- Rollback procedures with compliance logging
- Change freeze periods around audits
- Validating change effectiveness via testing
- Documenting change approvals for auditors
- Tracking configuration drift in LPARs
- Integrating change logs with GRC platforms
Module 6. Logging and Monitoring Configuration
Set system-level logging standards that satisfy auditors and enhance security.
12 chapters in this module
- Defining event severity levels in SYSLOG
- Configuring z/OSMF audit logs
- Monitoring for unauthorized RACF changes
- Alerting on policy deviation in real time
- Centralizing logs in enterprise SIEM
- Retention settings for compliance
- Validating log integrity with hashing
- Detecting log tampering attempts
- Masking sensitive data in logs
- Correlating events across subsystems
- Testing log alerting with red-team inputs
- Documenting monitoring rules as control
Module 7. Encryption and Data Protection
Implement and verify encryption controls across data states on z/OS.
12 chapters in this module
- z/OS encryption for data at rest
- Implementing ICSF for key management
- Securing data in transit via TLS
- Defining data classification levels
- Handling PII in VSAM and DB2
- Masking sensitive fields in test environments
- Key rotation policies under SOC 2
- Auditing encryption compliance
- Documenting cryptographic controls
- Validating encryption at subsystem level
- Integrating with enterprise PKI
- Controlling access to encryption keys
Module 8. Incident Response Alignment
Define your role in SOC 2-aligned incident handling without overstepping.
12 chapters in this module
- Identifying incidents under SOC 2 scope
- Escalating security events per policy
- Preserving evidence in core dumps
- Coordinating with SOCs and analysts
- Documenting incident timelines
- Validating system recovery integrity
- Reviewing access logs post-incident
- Updating controls based on root cause
- Reporting incident metrics to compliance
- Maintaining audit trail during response
- Testing incident playbooks
- Documenting response activities
Module 9. Vendor and Third-Party Controls
Oversee external access and integrations under compliance rules.
12 chapters in this module
- Approving third-party access requests
- Reviewing vendor security questionnaires
- Managing access for remote support
- Validating MFA for external users
- Monitoring vendor activity in SMF
- Enforcing contract-specific controls
- Auditing third-party session logs
- Revoking access after engagement
- Handling data sharing with vendors
- Documenting due diligence steps
- Reviewing vendor SOC 2 reports
- Reporting vendor risks to program leads
Module 10. Automated Control Validation
Use scripts and tools to verify control integrity without manual checks.
12 chapters in this module
- Scripting RACF policy audits
- Automating access review reports
- Validating SMF configuration
- Checking for unauthorized changes
- Scheduling control checks
- Integrating with scheduler tools
- Alerting on control deviation
- Generating evidence automatically
- Storing results in compliance repo
- Versioning control scripts
- Testing automation logic
- Documenting automation as control
Module 11. Audit Preparation and Evidence
Produce auditor-ready outputs directly from system tools.
12 chapters in this module
- Compiling control evidence packages
- Formatting RACF reports for auditors
- Extracting SMF data in usable formats
- Documenting control operation
- Responding to auditor inquiries
- Providing system-level explanations
- Demonstrating control effectiveness
- Linking evidence to SOC 2 criteria
- Preparing for walkthroughs
- Maintaining evidence repository
- Updating documentation quarterly
- Handling auditor follow-ups
Module 12. Sustaining Compliance Over Time
Keep controls audit-ready between review cycles.
12 chapters in this module
- Scheduling quarterly access reviews
- Updating control documentation
- Tracking control exceptions
- Managing compensating controls
- Reporting compliance metrics
- Aligning with client audit cycles
- Maintaining versioned playbooks
- Onboarding new team members
- Updating for z/OS upgrades
- Integrating with enterprise GRC
- Benchmarking control maturity
- Driving continuous improvement
How this maps to your situation
- Implementing SOC 2 controls on mainframe platforms
- Reducing reliance on external compliance teams
- Owning technical control decisions end to end
- Producing audit-ready outputs from z/OS subsystems
Before vs. after
Before
Waiting for compliance teams to approve RACF changes or define log retention policies
After
Direct sign-off on control implementation in z/OS environments
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 2.5 hours per module; designed for integration into regular workflow.
If nothing changes
Continued deferral of platform-specific controls leads to audit delays, misconfigured systems, and eroded trust in technical decisions.
How this compares to the alternatives
Generic SOC 2 courses focus on theory and spreadsheets. This course delivers actionable, platform-specific control implementation for z/OS, where audits are won or lost.
Frequently asked
Is this course specific to IBM z/OS environments?
Yes. Every control example and template is built for RACF, SMF, IPCS, and z/OSMF.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does this cover other frameworks like ISO 27001?
Focus is SOC 2, but control mappings highlight where ISO 27001 overlaps occur.
$199 one-time. Approximately 2.5 hours per module; designed for integration into regular workflow..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours