RESSEC(YES) on a transaction definition tells CICS to perform resource-level security checks for resources (files, queues, etc.) accessed by that transaction. If RESSEC(NO), CICS skips resource checks for that transaction even if XRES=YES in the SIT. This is a per-transaction control.