SEC=YES is the master switch that enables CICS to use the External Security Manager for all security decisions. XTRAN, XRES, and XCMD are subordinate parameters that control specific security levels, but none of them work unless SEC=YES is set.