You should protect offloaded information by defining the offload data set to RACF® a universal access authority of NONE. If you have security labels active, you should assign the offload data a SECLABEL of SYSHIGH to prevent unauthorized access.