The SHARE user group archive contains numerous presentations from mainframe security practitioners. Search for "CICS security" and "RACF CICS" in the SHARE presentation archive.