ICSF provides an exit that is called when a record is read from or written to a CKDS or PKDS. ICSF calls the single-record, read-write (CSFSRRW) exit under these conditions:

• The PCF conversion program converts a record into ICSF CKDS format. The conversion program calls the exit right before it writes a converted record to the ICSF CKDS.
• ICSF reenciphers a disk copy of a CKDS under a new master key. ICSF calls the exit two times during this processing; after ICSF reads a record to reencipher it and before ICSF writes the reenciphered record.
• ICSF refreshes the in-storage copy of a CKDS. ICSF calls this exit after reading a record from the disk copy to place into storage.
• You enter a key into a disk copy of the CKDS by using the key entry hardware. ICSF calls the exit two times during this processing: after reading a partial key from the CKDS, and before writing a record into a CKDS.
• An application creates, reads, writes, or deletes a record from the PKDS.

Using the exit, you can do such things as prevent the record from being processed, or add user information to the record.