To ensure that system integrity is effective and to avoid compromising
any of the integrity controls provided in the system, the installation
must assume responsibility for the following:
- Physical environment of the computing system.
- Adoption of certain procedures (for example, the password protection
of appropriate system data sets) that
are a necessary complement to the integrity support within the operating
system itself.
- That its own modifications and additions to the system do not
introduce any integrity exposures. That is, all installation-written
authorized code (for example, an installation SVC) must perform the
same or an equivalent type of validity checking and control that the
system uses to maintain its integrity.