Rocket® z/Assure® Compliance

Gain continuous assurance that your IBM Z® environment remains aligned with your approved security policy.

Talk to an expert

Maintain continuous compliance across your mainframe environment

Security policies require active enforcement, yet operational changes often create drift, accumulate permissions, and lead to unnoticed misalignments that can cause vulnerabilities or audit issues. 

Rocket z/Assure Compliance automates recurring comparisons between your live IBM Z® environment and your approved security policies, providing clear visibility into configuration drift and misaligned permissions. 

 

Practical controls for continuous assurance 

capability 1

Customizable policy baselines

Begin with preloaded DISA STIG-based controls for IBM® z/OS®, then tailor the active policy to your organization’s approved security requirements.

Preloaded DoD DISA STIG-based policy templates

Organization-specific baseline customization

capability 2

Continuous drift detection

Monitor your environment and flag drift in real time so teams can respond quickly.

Real-time configuration drift detection

Immediate notification of policy deviations

capability 3

Role-based validation

Map users to defined roles and identify permissions that fall outside the access criteria established for each role.

Validate access against approved roles

Identify excessive or non-compliant permissions

capability 4

Audit-ready reporting

Use dashboard findings and PDF report outputs to support audit preparation. 

Real-time dashboard insights and analytics

Audit-ready evidence and reporting

How z/Assure Compliance work

Set up

z/Assure Compliance captures environment and dataset configuration, supports MRSP upload/activation, and drives jobs through z/OSMF.

Classify

z/Assure Compliance uses role definitions from MRSP and supports user-to-role assignment workflows. 

Compare

z/Assure Compliance runs automated checks from the active MRSP policy and stores per-check outcomes. 

Report

z/Assure Compliance presents dashboard analytics, detailed run reports, exportable results, and a final audit report to help teams investigate findings and prepare evidence 

Visibility across critical configuration and access controls

z/Assure Compliance gives you a single, consolidated view into the configuration and access settings that matter most for security and compliance. See how your environment measures up against approved policy, and pinpoint exactly where attention is needed.

Coverage:
  • ESM configurations and user permissions 
  • APF and JES2 parameters 
  • Operational posture and trends through severity, burndown, and findings summaries 
  • Role-based permissions aligned with DoD DISA STIG requirements 
  • Support for configuration controls aligned with NIST 3.4 requirements 

Turn findings into action and evidence 

z/Assure Compliance turns every check into actionable insight and audit-ready evidence. From real-time dashboards to exportable reports, your team always has what it needs to demonstrate compliance—not just claim it.

 

Outputs and delivery:
  • Real-time dashboard insights 
  • PDF and streaming reports 
  • Preloaded, customizable DISA STIG-based policies 
  • NIST 3.4 standards alignment 

Related Products

Rocket® z/Assurance™

Unified portfolio for managing risk and compliance across mission-critical IBM Z® environments.

/en-us/products/z-assurance

Rocket® z/Assure® Vulnerability Analysis Program (VAP)

Code-level vulnerability detection and application integrity assurance.

Learn more

Rocket® z/Assure® Continuous Vulnerability Monitor (CVM)

Continuous monitoring of emerging exposures as the IBM Z® estate changes​.

/en-us/products/z-assurance/z-assure-continuous-vulnerability-monitor

Rocket® z/Assure® Patch ​

Visibility into missing security patches and related exposure.

Learn more

Rocket® Mainframe Security Services

Mainframe security expertise around the clock.

Learn more

Move from assumptions to evidence

Your IBM Z® environment is too critical to manage on a schedule. With Rocket z/Assure Compliance, your team gains continuous visibility, automated validation, and audit-ready documentation, so you can prove compliance, not just assume it. 

Talk to an expert

Frequently asked questions